{"report_id":"927d79b0-bb69-489a-8da8-efa15bb93905","version":6,"status":"done","tags":[],"date":"2025-11-01T20:24:25Z","url":{"schema":"http","addr":"tefowex.com/","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"172.67.140.221","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tefowex.com/","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"title":"Tefowex: Most Popular Online Crypto Casino Based on Blockchain","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T00:30:09.488797Z","times_seen":17699594,"resource_available":false,"data":""}},"submit":{"url":{"schema":"http","addr":"tefowex.com/","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"172.67.140.221","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-06T20:24:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"tefowex.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-29","domain_rank":0,"first_seen":"2025-11-01T20:24:28.960176Z","last_seen":"2025-11-01T20:24:28.960176Z","alert_count":196,"request_count":49,"received_data":6766941,"sent_data":22154,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tefowex.com/","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4f58df8ef556437633bb90cc31469c4","sha1":"c1c713bb5046a54cb79a8e7537b6d7fca624fd45","sha256":"2dcb2e50c883929aebb7a64a7a22cfe2260d856a3c36a6926c082da19c552b7b","sha512":"54c8a79f5897cd198db689700c24f950ad7fe19eed815f8bfa0e47428701d8c84a1fd8f677a6f1b2a4f1443f35f2dbd19e6f456ceeebfb1c59275bb356e1a5e9","ssdeep":"","tlshash":"bfc02b041427c47b421c6f4dc02243d4e4b020bcdc492480801d181800d0c313b40cd6","size":130,"data":"","first_seen":"2025-03-25T18:26:20.414558Z","last_seen":"2026-08-04T00:23:10.768808Z","times_seen":52566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/53090-941dd81da5fa3210.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15925877203605d5f2355beb36d57347","sha1":"17da103edacb7e181adbf9304938d039a200c1d7","sha256":"a986f72fb7dc330235296b864ba0f244f1126b2eff777b8a13ae36875dc96157","sha512":"ad516778c2e0dcaa482b03f5ab7a44fea87ce340ae85aba921277db245d9e6c5a49f70a27eeb99b6bef662c873647590edc83e75c63116c4e456045245b91568","ssdeep":"384:hC/SLOZgztFl6pfisYkxdZEAXtwdt4DvWmV9PvTLsb6r7/:Y/SCZ4Fl6pfisYyZEhdt4yIWbU/","tlshash":"0862c6e0d362fad8ed6785d5f12ea906b11f2f988b19c074f6b85c2053181c4ba27b9d","size":15666,"data":"","first_seen":"2025-10-16T04:05:32.826709Z","last_seen":"2026-08-03T21:11:49.390909Z","times_seen":15980,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/95064-8ece3d2817a292cc.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1820ac6716b4d7fabd4dc1c1f875bf6b","sha1":"572e78286fc5400c9ae75eaf833f43b33d7374f2","sha256":"e10d260450467cac4102b28d0e25aff8e28aaf534178f2db835f27ffbf2e2dd1","sha512":"52e76827863a4baf602a24c2413c48cf40f80113c3d950c2f2ade8e9c77497de7207a1ce270d6467f01cb439d622efb0c06dff646581c420547ef8bbda8f43c6","ssdeep":"384:mTEzSMQjeMy1BHBB7V0BvDrXIwXJ+ba2YUSTNN8txdOTTpPNUp0icpUAHEvDBUgx:wEzSMEeMIvp0h08J+G2YnT76WM+HTY","tlshash":"0662a42e9175adf4f2526c689faea40c719f958a4b1648bd777cbd3000894ec3b137ca","size":15030,"data":"","first_seen":"2025-09-13T11:18:31.957785Z","last_seen":"2025-11-27T20:26:36.441914Z","times_seen":547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/4bd1b696-ad7506e6ce5b48e8.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15510eac41ab1d5ef4d07adf66470336","sha1":"af7eb0a2168918b5999e83b71a10ba52809f38df","sha256":"e5b9e2570593ab1e59ae6a397baec8491e4c3d5e4628aa1439940ac0e2aee2fe","sha512":"116e3ef82cb1608f729f9731bf3ba61a1a75624fec0adf57d0536e5f7e1abae6c939e93af5bbde399079cc1634b5ffda250a76f08571d2e30c88eceecd05b22a","ssdeep":"3072:btfjLiM+NFCC4YQbCCAaI/02UHCgwLRE4:btfj2ld4Y40fUHQRE4","tlshash":"0df3f7e83d99e2116eb342a7109f2803737c262b240d4c60a615fd9db5b845bb17bfde","size":168420,"data":"","first_seen":"2025-06-09T17:09:55.347659Z","last_seen":"2026-08-03T21:11:49.38186Z","times_seen":18346,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/73345-b438bcc17722696d.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb597de485c3029dc93b6f3225acc0d7","sha1":"d3a6bc9d6749ea9f0ddd1b1862c90303f3ec3254","sha256":"3513d69dd757c29044eb92ab6a908ba6755e0845c38105ab2e196b0c75b96583","sha512":"1420716788ac11ed76547147942bdf2329c1bcfe8770745c3bbce32f99ca5c5866e20253ced9e0ebc4597003f7404825de2b601f8d24b5c2fce1125eadf0ad63","ssdeep":"6144:bV5sFqdfuGDdF0pL8sS65eILs3QKQmiOB0lDz:bispi9mVB0lP","tlshash":"ef644a9c7682b474939b016a807f0107f37e2d57240e4824f270d9ee7975e99a2b7fb8","size":325834,"data":"","first_seen":"2025-10-16T04:05:32.880573Z","last_seen":"2026-08-03T21:11:49.415162Z","times_seen":18229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/24464-a28857939df965be.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"979e998b609ef76b1dda237e27d365f4","sha1":"d0847db3ae97cfa14d1cccaf7618fd2da0ff3ab0","sha256":"a759eb3661ef97033bd6995f9b131034f60379536fcbe2f9316c49f635b3b4a2","sha512":"358204847404d43b20308e85858fd70c78b5bb9f94df23dff1e5e03de04fc452b01154f3f38a2ccaa1ad057b18708ac5bfbcb3edc1dbe7d89f7655d5d426c1fe","ssdeep":"24576:M/cpQlKxZNgvIh/VAJNgvIh/VKq/cp5lKxi:M/eGG842s4cq/eXGi","tlshash":"9ec5415c8b6601fdaf586d81ca4770658fe286532fd789ec9abb7e104bb06df0301e61","size":2704981,"data":"","first_seen":"2025-10-16T14:33:45.09062Z","last_seen":"2025-11-16T01:25:44.580516Z","times_seen":418,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/app/global-error-84c26475654e8359.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"86a0c59c18713dec34f72247f6404b91","sha1":"98f942f10f3985863957d5d9cd2abb5b24db53a2","sha256":"8ad3f0d37edae87defbd4bd0b5ad2ea68249e18b9a2e234e47528e91b7dce82f","sha512":"5546453fe918ab9bce3efc59242685291314a053c461bebd4d77f0b37d17bfc60ebf3d4bb03a9e808934fa0a31d566362831059a26704f5ecb09cca33b9ca1e9","ssdeep":"","tlshash":"bed0ebc202407cac74160b6c00b0d830300800b77018c8dee323ae2008624e00381c0c","size":258,"data":"","first_seen":"2025-10-16T04:05:32.905383Z","last_seen":"2025-12-04T17:28:23.099055Z","times_seen":502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-04T00:28:02.564375Z","times_seen":213246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/31684-b8837a619f76486e.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c9e1f9e9713d9d76f976369dac25760","sha1":"1d7cfa0fb89dd89210e337557ab9af8fcb9e7e17","sha256":"07adc3c304cb5798f2e26622c0215307b7b65a7f8bbb87a32f44832f781b75f4","sha512":"a34dc478e1f217f0cf2d8a2c291b933dfeb5121fd41a2f08f2ec3a5b526ca55babffd1358cf0b55ad15009821510b7f6ca9a66793931023d3910d85938ff1b0b","ssdeep":"1536:3Hk+1qVc+dJWgclHHlU0Zb8OeM8aZLoEAEuRaQ3aTcXH10nZAEUOW/oM+G6GZVsT:VqW+dJW9xAMiEuV36XZNGZm01A","tlshash":"5704b8b676d0f89107a780d5843b400af3395c3b146f74a0a3e6cce975645dea1b3faa","size":176018,"data":"","first_seen":"2025-09-13T11:18:32.512742Z","last_seen":"2025-12-06T23:52:39.117547Z","times_seen":597,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/global/fbq.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b834c87557376668b3c3fde729a8db5","sha1":"872448d973ce02e75d52b31641d961601167d04c","sha256":"cc63b490224b081fc3bef6a696dc3ecbe7ea7bd45df00c8a53cfe304e7bd5469","sha512":"1c40528c95bf8c5d60ebf3dba6df8ca43390e5239ea50ef08705e547c48635a1f399f2f9d7207b4575822d2ce3dfd6e2b7ef7ee3b431255837cf2545ea5ed4c5","ssdeep":"","tlshash":"e7e0619f2c43b42733e97639c727a67b3763070178c2d919ba05c8151fe08966c96d9f","size":408,"data":"","first_seen":"2025-03-19T10:41:28.92776Z","last_seen":"2026-08-04T00:23:10.736536Z","times_seen":26977,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/56060-8656721e7f9c8859.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6685f1c3cdf6f0d1227ab2b5af23a056","sha1":"491d91380ba5da6dcd5027bd954e6fe11103b18b","sha256":"237ff25124f0ca73e06c9e1d59caadd016273fa9b5b6bf211c991cc8d34d1b92","sha512":"6667f2ba323afce441aa6e23fdcb8504dfeda05286da37d594827c605042ba88ddd7bc5c6ec9565109d4a0ad4ddc9f8cdde4ca22cbb9eb8122b85ba04bf1d0b2","ssdeep":"192:/ztywjuim2pZQizyySL4tLg6SpiQhQ+YmzSRAz21OfsuAAuaSXCfb+e:/z9juim2xWySL4W6STYmzSRA61gEC5","tlshash":"4622ea847260793e1547866fd1be5516f27a292e382ed25433b9c83cfd21ac85336bec","size":10031,"data":"","first_seen":"2025-10-16T04:05:32.850927Z","last_seen":"2026-08-03T21:11:49.411711Z","times_seen":18237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/53331-b84ec44a66d742c9.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffc2a9646f640ee24bec96371d8896d5","sha1":"43fb84011d63dd3ee53c4c5a6ed7bee651bc780b","sha256":"ee75b3f83f6bb1fe59b15f18a040463973036c403110a597b3e77b659b240fc9","sha512":"19765f02ce6babd708e5a582fce2a697188168486b56c78f66d75c7ad4d29e02371f839d2b967fa8094e949f2fa6de2e478d24e24b3150f0eb404dcef6fe63f6","ssdeep":"384:/bEM6MGSQhbWOoOSQ6b82p7X4WsIBcf9CkSfA9CM3ORBq5T25iaTuJ8jFNDtv/LO:/L67hSOoe6h7X4WsIBu9CkoA9CM3OTq1","tlshash":"63b2d7e993f4b6e0a006e3f8d607a8793a6e19fd7b32c95893d95c20c5910dc266ddc3","size":23606,"data":"","first_seen":"2025-09-13T11:18:32.113392Z","last_seen":"2026-08-03T21:11:49.422549Z","times_seen":18247,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/49080-2901843180fabd12.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"69b80d969aaad07036978bda468796f5","sha1":"e06516d12bff2faa89329f83289d27d4ac369917","sha256":"5f09712195529d437bc348578aca6c679da21c9bab03b7d1012f70a672a5e017","sha512":"bb02ebc1b0fecb6ec0cde686fa78655706bf3f50939f8e7b52347e7aa9811af62fd5e477fda50bd35febb5fab3c591e88fdcac416da22b22d3c1b90f3d9220d6","ssdeep":"384:OQLgSjUuqTsJIMnocJPYVrBNfF17KGYJy/t3F:mSjUsIXcuzcpy/tV","tlshash":"a96209a0b580bd360367499180ff4706b335593a5c1f9498b7b8ccd562b4ece41eaf8e","size":15261,"data":"","first_seen":"2025-10-16T04:05:32.818988Z","last_seen":"2026-05-26T05:03:28.592629Z","times_seen":6852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"95c006474330f7cc93c1972745bab750","sha1":"b97d7833bd9f82d58bf1fec9540c119ae0255e20","sha256":"68e6fa245e3a32cc5568cdcc5dcccca7be69dad19f1f05e36248ccf35169eaeb","sha512":"5d83fc261ef27f58cf2dea6d6ba52f17e945a94f4fd64b0c3aadb2e11447d27116d804bdc2ef78e43342378c78598b91252737305f050b1a006d2b5328b467f2","ssdeep":"","tlshash":"de412f0fb208e4453ca3ee1b42331e76a48edd730279f22ca50ee96e11429bf576c965","size":2248,"data":"","first_seen":"2025-10-16T14:33:45.000461Z","last_seen":"2025-11-08T17:30:45.245379Z","times_seen":119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/app/(auth)/layout-21ec38ef81635840.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eeb148fc570d2378a9f4fb4cef9277e8","sha1":"f15bcc479e6192f1c27e2c50e9957c34d69e1dc6","sha256":"28e0352c26286fc5b9430539a76f6e36d0f8ade3679fef2b830ed3805fb8b690","sha512":"0d5e4e9dc24973836af109e4586ee36dfa759ed54863e94049c0c21323043a57cc61354a7d5016b098e269eaabf1fe4be8e76ac9b487c6fe54177f0e396d92c5","ssdeep":"96:XZ8Q2TeV9GCuyzz3qZqCLXx29Hn5G9UV3aQ+7XCrUBTCUBTVy19GCOsY89GC4b6:p8Q2TeCtiz3Xqx29o92d+7XCrUIUvV3g","tlshash":"70c1a5b7b6c5fdb2565688d088378207ba503d37205fb480a7facce53169dca44d1f8a","size":5634,"data":"","first_seen":"2025-09-26T22:32:24.049018Z","last_seen":"2026-08-03T21:11:49.409966Z","times_seen":18266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/app/layout-e1318fba240c7669.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d41f235482170c8a2595fefb3a0ad9c","sha1":"3056b48fb4ebf6e8912719713646c8a3ae8978b5","sha256":"f882489484f794cdc46128ed4ce302047600faf34b384d77078667243b05045e","sha512":"8c54646493a82de6422e9160e93c4fb7ea8464a01d45b51c6bfe94f67d1f29309ea3f002c0ec9c841a06d59c86ccab35dc6ed81e5c977ffb5d9469ea0a727d12","ssdeep":"6144:LdGqB9ykZ7BLnoVj/4D4mfWyDJf49jG9p2A+My4xOy+PuE21QQN33JeRVZeNEq2+:ZGqB9ykZ7BLnoVj/4D4mfWyDJf49jG9D","tlshash":"7b14774c87aa02ec6f995dc0c607748a4fd19513aed789fcdab9be1447b1aee1310f42","size":201567,"data":"","first_seen":"2025-11-01T20:24:34.095819Z","last_seen":"2025-11-01T20:24:34.095819Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4090bb1ed48eeead35e22b6cebc238ff","sha1":"9860c52100db296e67d46d73fe5c13d728700156","sha256":"f261989b9ab30d03c9b3983c0dbc141623a1b795d5de7366081eca4b969561b5","sha512":"48bbe6e5ca134ec6788def077dd37d324d846128476ca3f1f8952dc882ec7c6de3f430010069b84d4efe3b8c8eb44b8c2667ff32d8e831c3f6b79b76dbd288e3","ssdeep":"","tlshash":"9de0485ce445f85569218a2f002f5d95d4ccca6e43ec505c77dccae2c756e7d0758cc5","size":373,"data":"","first_seen":"2025-10-17T13:26:51.115908Z","last_seen":"2025-11-08T17:30:45.246534Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"08ede45690c377a266d94cf6b129fd6c","sha1":"5dfb2144278570d196918448dce94fb6f1e5e310","sha256":"32cdea6fdaa8fa4b954ac5e619595d0404c84af3684f2d711363d417b42e522b","sha512":"02e3bf9566c1a323ded887c5496a03fed62f50cc278a1737e79a42de4c651d4299677b2d360ec236966b790df2906f61548e83db1040d290c3ed0e37c5fcca1f","ssdeep":"48:LZfx0VoWnnBn6V0mDNVJO/hygnBn6N/yVpB4DNpO2hrY2SbDKVJf:LIBmFAIe8UpYprYvO","tlshash":"c781e11e680ace0bdc7e7d6d023d9d36a0cccebb47659af4818ece581a4687527ddc81","size":4185,"data":"","first_seen":"2025-10-17T13:26:51.122383Z","last_seen":"2025-11-08T17:30:45.247831Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6b02d0d7b29ac7ae111d005e726df7de","sha1":"b53f0fc978691dead2e88a78d8664f88a82db1a4","sha256":"93605140c2a6aa74ff7dd95820900cbca9d0d83b0e7652d71ace1ae8071c96db","sha512":"b8b05b39a69ed251d76839db412968a808af99d914e2eea0801a88adf1ae927b07e0642396b2a9ea3b6cf775c26b0ca9478cbaed22040619ce90faaaaa50e2ab","ssdeep":"","tlshash":"5ad05b39a004dd66bc1a7546183ded3b105d548f0455dd6427c4cd144992a3a3302dd1","size":252,"data":"","first_seen":"2025-10-16T04:05:32.985205Z","last_seen":"2026-07-09T14:34:19.245483Z","times_seen":523,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/global/twq.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f4d9e824f13f7d27acdc868f36f7208","sha1":"125a712d37aefe5d3e52ce2ae8986e109eb473de","sha256":"d6768cdba372d919e6d9322bf3cf3a0dfe427d86293aaf16f23d096028a00a1a","sha512":"d6395459961f34c3efc4c55ffa6bd873fbf20cf9aab17d31ec926d7ff645cfb9ae0cfea469b98e0604c5de162b60eb1bfc7b06a6fe91e3497f3a4fb32d29c20a","ssdeep":"","tlshash":"66e0e7f12d093d631fa11374117f931f3143210575595b91d59cd540376249f8037b8c","size":308,"data":"","first_seen":"2025-03-19T10:41:28.935479Z","last_seen":"2026-08-04T00:23:10.730598Z","times_seen":26971,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/58172-2e2ad5efca352ade.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9784916761bd2bbc76012952021d42d","sha1":"253cf85cec6b9a53b449d758e2d542a9a182bc23","sha256":"c0b7563919543117a0168d95e03a8812821df1f79a8bf094dadda24536660d92","sha512":"54d0abe66c6ec80868c406f1838ff8760bcae6758bd406c57e29d3ae842812ffb81cb315706c46e5d6a26e8bb80c7b1fc2787d02e360d635ebf22aad6c3c7431","ssdeep":"384:H74ml/FeOUGcg70p+tlof7VCEv/f2rVdVOmo778U/eWJV+o6:b4mldXUGZ0p+tl8VCEv32rVPOmg8UWWo","tlshash":"cb62a6d12b10495d3583ce7aca363929f2ef69ba393d57401168cb3cfd18ad4e6361e8","size":15156,"data":"","first_seen":"2025-09-13T11:18:32.621492Z","last_seen":"2026-08-03T21:11:49.365569Z","times_seen":18259,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/58211-c087ffe3e38101f6.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7d84948f8ca0ff495e7533d0969b670","sha1":"3330c776cfbb7ea04d30b89a9686eaea35f24747","sha256":"2180eecb87df810a0f91771ce87e9c4f6e185e9011d00147eef0ca9c7ed750c1","sha512":"04a5f0711a52dd8bcfe0ea6d66662ed5e0a8610c8caffe461a8c8178f8f40e55b4c40c7ea11716a7dce1631534f5e22f9c5d86393e31835bcc686e4aa6254c85","ssdeep":"768:01KE8vZ7HInPlFvvb5AvexGRrxVP1fr4UK1fWbqYsCL1fZnK+jBV9YCO:0voWV","tlshash":"f20399866740a83d2587c16fd63a6415f3bf14ebb92f9390219aca3cf506dc0f5365e8","size":39725,"data":"","first_seen":"2025-10-16T04:05:32.927959Z","last_seen":"2026-08-03T21:11:49.391803Z","times_seen":18193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/92148-f4aaff0397544571.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5a9fd6c13384f417dca9b4c6a264114","sha1":"af973071192ef3c9c7303f8bf652433313df5cd1","sha256":"1c118c9909b4025458035a8429166655f856ff6fe8e876f8473c864fc8b7e395","sha512":"e718174294504f8b2477aa8d18a04c1b8a41fefc2edcc184ca7e165d05a8ec0ba1f5cf02ee1a047aec26d1552f21baf7c5353f9515444a157aac1db75d0d4c6e","ssdeep":"384:DLtQxW+19Vd6J4FU0Zs1Th/ndpRqgG4gjbI3/ovs2GK/sYp3wm7GjUWybgAKJ7d2:dQE+buJZ0y15dpRk4y+gt7/sml7GAFs+","tlshash":"3472d95da3e6a5e8f503e3f8835bd8353aa72df56912cc246bf56c25d50008cb8a5cc7","size":16657,"data":"","first_seen":"2025-10-16T04:05:32.855496Z","last_seen":"2025-11-16T01:25:44.551607Z","times_seen":426,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/app/not-found-aa673beed1a0d17c.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"517473bc536db4dbebd6487563eca146","sha1":"f21faf08e40f6cb1b74eaefcb9a180061efdcce7","sha256":"91ae4e593344b4f4b340d0977cefb2001673eed4e835a776a3d75aea93080810","sha512":"bbf5c05af3847c109eb8063604e3e2c154b4b97c0bc5bc3a4e4fe574280deaf2098a4064faf5072600b35d20a60b824f11dddb5c36ad8aa61a969189c0b92a28","ssdeep":"768:oyPr4cLO1IlSlF62mJpMzlou2Q4rF4UpWzW1DnHbu1agQT27wtYRfH+hB64UUo10:fkif2aMaiR6HKf0x0XEdw/nje7/a9yOI","tlshash":"c61363ec5bb109cca98946eabb0614bc273e91bab068892ced0d1d386041cd5fe17fd5","size":43090,"data":"","first_seen":"2025-10-16T04:05:32.951614Z","last_seen":"2025-11-16T01:25:44.549575Z","times_seen":431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/63712-a16fb043cedefd4a.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"614fe7514839a09db165d48ad01da840","sha1":"e492263f454db98a8cc2c89c777e5572e854e343","sha256":"4974bda3ce7194ae592697daaccd424e6e8e231bf15187182bf4d16522e9bffb","sha512":"7eee15e6bce48c5b1adfc53ecfd7492109fa6272d866622f055b91ccc80e8bb4e9fdc350413cf4282d6b85b13fa72188cc51445cf6eafb6167d149ad45af1b8d","ssdeep":"384:RSHQzwzI46bFWDyhQ1qqo5W6m4WIQgn1fy4GaQANJVOPe4+snOcT34McbAmrh/2:/dZsunDqNs/AFD","tlshash":"1aa2b449b9d1f47453a3aa51843f440bf2674ea8a05db8d8d367c9e5adb888e4073f3c","size":22721,"data":"","first_seen":"2025-09-13T11:18:32.286663Z","last_seen":"2026-08-03T21:11:49.386391Z","times_seen":18266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/dc112a36-4dd9553e3950a789.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b0312e3e2ff7226227ee081f6693db1","sha1":"823c7003795d9623f8992900a6f337f599bb7eda","sha256":"dccd0125f7ca7c6c5f3f8ae7d813743257cb55899fcab2d63b70fdf06b2a05e2","sha512":"612eb966b9409ee719588a9f82170d4d6c9b5c075b85981a1ac0dc0fb8119997de7f6a139ba2908d7ccfe0ab342f452e39ca15ec3d9fafdc1c2a7d36cda06d87","ssdeep":"3072:Hbyz4KjrqQmINGbpJGDc0Lf1c/X6Rpbdt0myoQj7sOU1IMi9wD5yojt:HijOQmINGbpJGDc0Lf1c/qD0erI5BEt","tlshash":"295419597254343805c540a9906f094bf736292e246ac49cb36cf4efa8bdecd31beb79","size":305838,"data":"","first_seen":"2025-07-19T01:07:13.417114Z","last_seen":"2026-08-03T21:11:49.398195Z","times_seen":18321,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/main-app-fef4a8898ec7782a.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c06acc17c28c2888a1a2466b0a0d12d8","sha1":"63d7278ad805cf6b27e6fb76daee100f7cc61afc","sha256":"90a949795e63ad10200d2f57df2706979fd66bd412caea2130a9c707e21c5d5b","sha512":"745f5cba8c1f8c006b2d9a1f8ec15fe3e66d7909766f446755243e1b63aa4d611233d9fa175bc9001bcbce4a4a782e79feb80846ba96f394b38c1ed2b1f3c2bc","ssdeep":"","tlshash":"f5f0fba55f0df42f5d266e74fd97ace2184f4275206b4e647d01dda23c67b6cd260408","size":537,"data":"","first_seen":"2025-09-13T11:18:32.65005Z","last_seen":"2026-08-03T21:11:49.431287Z","times_seen":18315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/34230-e87c8d35c9fa1ab6.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b4900ae7910372c39f90a4ebc702603","sha1":"9a24a588c269ce9c3f57345c32fc19f6681dbc0b","sha256":"09f6962b4e78defeacf0013f19bf739d5427801904333b19f9ab4cf541db3440","sha512":"4a02c00c407ec0eee649e22031775550a2e27fd675d23235783ec11d04efda2480a219e318fbba5739af05b0bd575f5d6d94a5a5dd2db29a03b891b9ba3069d4","ssdeep":"384:05ae/t9qDM109qxJ7aPk9RqKIyoIPzM73I/AKIJ1L/7E48z/08zXvnL5/Tz7qt5V:veVwDM10wxJMKIKIy6IzIj/9KcKN/POB","tlshash":"b5a272c9a390993d2583c53fc635b426e2bf09fa753e534062a9c63df909cc4e7365a8","size":23047,"data":"","first_seen":"2025-10-16T04:05:32.834372Z","last_seen":"2026-08-03T21:11:49.392671Z","times_seen":18187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/73943-a1da367143a13ac7.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e490c41ebf0e8e65f7d80bd12ad7df75","sha1":"b29bdb1b8eab7dd7ebee21f75abd74b12cbeeadc","sha256":"7b286340f4a6040af83fdb4a88fc934389877998f068ec85355d16f6d5041441","sha512":"7ffa1d698766b0d6e98fd0e9ebe2d6705e2865fe2991462d8404d326c6b27d30dd790c32f9ebbd8542d7089799c8b0dbe41b46b47d8f1b75abdf933cfaa13826","ssdeep":"768:Ssv1I3roaqNU6UECNOatsevuDexU4wt21csRm9M1+L0DW+XWZZuU4Os6salZPljB:EtP8Rl","tlshash":"8b13629c97b119cd7d885ae9bf0600bc373e92bab069882ded4d0d389045cd5fe1bb94","size":41441,"data":"","first_seen":"2025-10-16T04:05:32.786226Z","last_seen":"2025-11-16T01:25:44.556336Z","times_seen":431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1aff0998bf170dae9b47b137424bde0f","sha1":"c7ecb6ee0f0f216c97144f6c214b4f31bc85e663","sha256":"e36ded9369ff5d14d8d38ef8a685cc862eee64633209c3362dc57c8bb407a1e0","sha512":"67f54e6c86b336b32dcda19911605cb75d83638b8dc232c6b2f8f1355c309c2ac6b65e663f0ae2121c2d490861861e9fd057ce4c136337dff7e2dadd082d27c9","ssdeep":"","tlshash":"c0800470c0400c15d431405314341105017d400d0100470053505f4470111055505dcf","size":34,"data":"","first_seen":"2023-10-28T22:44:11Z","last_seen":"2026-08-02T20:34:59.395502Z","times_seen":1896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/4533-d42ff445e36846e9.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"92b0ad52744430a6b8818b6792487a1b","sha1":"45c7b7a75224e1ae205d10f5cecc782c65fad15c","sha256":"e7b4367d903d0b348d001f9a4d841e3e38c7ae88b0a0138505c0019763de7ee2","sha512":"590c2318e67d2303cb61f441b1096806925f4e557ec868a0497c4ef1aad784cde66a5fef99cb2a9dc6ee685848c23c09e24b01b4bd5d63ca88566655311049d8","ssdeep":"6144:+w/lsfDuv+PunKOuelr8jbdfjuNxd7dE63Alr47Wu58wMQTMnTI8HJbt4KOHC5VO:rhnKOPR2IdT3qNuVMcsJlVdJds","tlshash":"f7151a0d8b9833f12fde3694364a4d3fe65db2749351c466a8d9e3aa118cce4503bbd8","size":950242,"data":"","first_seen":"2025-11-01T20:24:34.142722Z","last_seen":"2025-11-01T20:24:34.142722Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/app/(landing)/page-1dae2bc8e38d1d5c.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25cb6ffc60234b9712789e3e77a33be0","sha1":"1b76f31cd0843a2c68a9c6f241622df367356f51","sha256":"2e496566964d0bc53aaa32828394764034bea37702e6f54f2a42761336f1b9c5","sha512":"bfbc1856a96b0cc97f77dd285489e9060086f3b5bb9827cea479aa114ceff1b4492c58b8686e2a1ddad9a36845ec6793bf74b3a2edb78e01b9f3d20c9692f1b8","ssdeep":"384:+Saddq55XGydqhFoSObqu7zYOJV56wzchc:+Sqk5WWWoSObqQJV5ihc","tlshash":"cf62a881e254daacb45394adc32dd039326f25a5d65e8570f4fe9c3861094c8fb2bbac","size":15017,"data":"","first_seen":"2025-10-16T14:33:44.841388Z","last_seen":"2025-11-08T17:30:33.379602Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"812e5206d1230e9f72d4ab14d94d40c7","sha1":"2f44993249a15e7c55ab6920b04b6a72ca5fe3fa","sha256":"00ec720755c6370b9058e409e550c300f0ae7013767c770a9d9c0472031d0ce4","sha512":"f76868ee104e73013e04dd364a2a8ed954a2b1cdb6740d72fd7168f80b75991d90af10f02e5fe55b2c409feb063a3bac2d04ceb4ffb3759dbefdb2b6b26b9b67","ssdeep":"","tlshash":"aad02b91dc13dc1dc3574f25183f1c3d21cdc56513059247e885c97c5981e3809f0dc6","size":277,"data":"","first_seen":"2025-10-16T04:05:32.993642Z","last_seen":"2026-06-17T17:29:15.771709Z","times_seen":505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/webpack-8441cb4779b35f72.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c47809c7e3694245517b22d62b33e571","sha1":"2d4bad718bc9214f25e939ecde53462550228f2e","sha256":"1ff5db653fb24edc5d5d0068602b8196d320ccf26f523a7f8b01aed6b52e1839","sha512":"ac9192978c273386a1748f4d1490d64c1e894418ba13e582c09cf9440403a2eba7e02b1af03725283adcbec36a78fddac2622f3ee263f5224eb617321cfdcc83","ssdeep":"384:Qhu6LDiavH0qIc49SNj/OiatVzpqBmCBrD5qeqQM8F7PHZ7KtfC59dRQt:QKavfIf9SZDatVVeND5RZM8F7/Z7mfCg","tlshash":"81824bfdb35cdcea2d3105c26c1760e4761871223c0748e1b1eae77600b6db5a66afb6","size":18254,"data":"","first_seen":"2025-10-17T13:26:51.062589Z","last_seen":"2025-11-08T17:30:45.230165Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/30731-19de50721de60a13.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a6f403b4f59187fb0a165c9821ac3fc","sha1":"d6ce18fdade2a25f708897c701ff2f11c6b6937d","sha256":"6e6fb1f3038f822ca348ea62ee3c31370dc9532cb4c315a3d0724e3c2b473563","sha512":"64a67dfb42b4390435192862c524cfb6f5c0cbadafa3469a133def471589a44c01a5062ac61e337eff6570591bee8fb87d1b129e5a441f486604b7971830c312","ssdeep":"3072:9dHg+1uKewJ0Byiw1QRi8B6a3bmicWAM7c3jiPYFEcFBKKMhEmDwlQx:9dHxQRB0Dz7vMKmDwQx","tlshash":"a515b5985bb553fcf405f7f48a2ba4b43f6a38f67a42c4b8c3a91c15d4520ad89a5cc3","size":910744,"data":"","first_seen":"2025-10-16T04:05:32.777392Z","last_seen":"2025-11-16T01:25:44.554929Z","times_seen":431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/53069-c58f8f632eda4cdb.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb5ebba3d13b139e963f92eed5ed1ae6","sha1":"982beca71526f6bebc0f559a33e89a19d085084e","sha256":"1d46995d13a153216920d2ce27849f090e18202876dee75180e916cb14ce8aad","sha512":"4873bc8d7932e3e1b23bc0a868702e349fb4ad52ba80c387d6591d427095bbee847bb27989590aab9942cf2547ba02619b6c085d1d7cda2dca68fb9494b5ca95","ssdeep":"384:Gx+QZybNhuWIpYh1IWtfmg2Lr4i4ysxQVv839TORERMR4e8TefNxBc:y5kNhlIpYPIWtfmgcr4lysxQRkT+4Q47","tlshash":"88620988a399a6e0f6819bf8970f611db57f32a08a49c8a4f3717d3060854ed7e55fc3","size":15861,"data":"","first_seen":"2025-10-15T07:59:40.138236Z","last_seen":"2025-12-12T15:33:14.449717Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/82849-380dffdc0dc4ddd0.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b2dd0a100347fd3f84d241021cdd6e0","sha1":"52683de19b9bddf38b646469032b1ed204fd633c","sha256":"ead8fc5762bf83c3e5cfa97570dde8bfc968a4f3b34eb45f22b063d00e408a1c","sha512":"5bb93fd32f7c31627654dcc091b930d97b69eaaf3664d0d84f6a2d01c6695bf0492cff6639f69af8d9d79ea2e51650a242e9646457b5920a45ebc40a78e67bf6","ssdeep":"1536:4UcXlryCtX55mQPVpmsuIurLJmvU340MLsUDG3BZN2EaZxVcGR5c7dhP3Whj21m9:3+v","tlshash":"6604d5debba0a2f4f005e7f8d7125468366b39fe6e52ca68c3a91d14e90108cdd59dc3","size":178013,"data":"","first_seen":"2025-10-16T05:32:37.319774Z","last_seen":"2025-11-16T01:25:44.555828Z","times_seen":423,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"03bed1c9f4e8d6cae4c521e6d7ab588d","sha1":"fc39e1bab0359448ab494847c2030c226c6cddee","sha256":"4fe219f75c3d0c0db5d38e29d1a4cb511d5d83276dfc2c4bc26eecd479f4f223","sha512":"6aec1870af0d4280e7b71f8e0c37cf0a50d7acece1dacd05a832f62d3f020bc3ae85ab62a9e369a93deda7195aacd982e72748fd1596ded93827d0eea08f53e7","ssdeep":"","tlshash":"1ff0dc62ad00ed1385b60f1118798db431dcc53f82445ba9eba6ce2f255f27ceab3951","size":464,"data":"","first_seen":"2025-11-01T20:24:34.145025Z","last_seen":"2025-11-01T20:24:34.145025Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tefowex.com/greenColorDSGN/mix/landing/bg/elon_musk.jpg","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:03.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /greenColorDSGN/mix/landing/bg/elon_musk.jpg HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 53769\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:03 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SvM4k70mLAOzXY0YR%2BtqR%2Fa57VNiEwDCqV5sh4Fc%2FShZgbrRoaQvU6KRgz%2Bhgzxkh9DhoJ9VNpgh7DS4o%2Fp7jkaM9TPDPCmcpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d0c0b6956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53769,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1332x1000, components 3","md5":"209a8c202a4573e2d2933c5d06003ef6","sha1":"dca842236d0a2428d7c2f5828e4088661e922cd9","sha256":"2673ef8bd00c8d232005a884600a6dc5cc9c0d2028e24760ee0dfc256f891c7d","sha512":"4ff45a5071dfdc79bc1d160eb8ea28a50166cc5873d0693d4fd6ebcda31a07d0a5b3d0e4e2578d2bc3eb6c251944ad58d0ea1074fc79e8c50bc3b1ec66bd6398","ssdeep":"1536:66kun/BbxmiRRwWAMPzNkedgbeB1X1eHVYdu14Lji:66kaBAMrN2beteH1qi","tlshash":"8133f1b3d391da63cb20097bf80713e31326ed6783f91ede04959178d69a71c982b9c6","first_seen":"2025-09-13T11:18:32.495407Z","last_seen":"2026-02-05T15:48:33.051732Z","times_seen":267,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/greenColorDSGN/mix/landing/mobile/elon_musk.jpg","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:03.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /greenColorDSGN/mix/landing/mobile/elon_musk.jpg HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32572\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:03 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0oWmX1gPlYd6YKdW%2Bh3XDU7JGXHpUwCwCLyKvSTnyYLYEUMLqX4UIkxiO6QJpcZf98gfmaUWqLIrW7lDTn2bZNNz0Zgm8c5itA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d0c0b6d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32572,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1346x558, components 3","md5":"bb012989d2d0067684a741842ff6d44b","sha1":"8748bbd342160bd93485a8dd2392b78d5f793028","sha256":"17d873346a8c616dd120107c79dfd3cd276a1fe9edb1862010edd185e0a52a02","sha512":"1ad5e2ef236c39e5f2c63f0308fa674e2c4121ed67d41f85dc2214ad893f515ae5927cdf7932721fb13b519ab7d1cc0f0d44e76b15a73e09ec2fcee5f2449d69","ssdeep":"768:0be1EvMLk3dmzcr4zZEL8X8dOFTz2j3eq83HEp+uSnVne0OT:0be2gamz1ZeW8dsKjuqIyje4T","tlshash":"0ee2e0570323ede3e4e885b35b1f032b42d579a9e2643c59b3e898598a7ba533c3018d","first_seen":"2025-09-13T11:18:32.349205Z","last_seen":"2026-02-05T15:48:33.021469Z","times_seen":267,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/css/c62111be4daafa96.css","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/css/c62111be4daafa96.css HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YuX5UGiSxTuGejU34B%2F8uZAaRH3Yg5lA8WvLwvDDzAXYw%2BkheC6KE%2FGwi09uyJCVM6Z6nY5ye4UVG2TRsyZIJvmgUXyRWFDbLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d037b0256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34520,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (34520), with no line terminators","md5":"c8aabd8edf73a2a318cf6b8919748be4","sha1":"c39870daccc9ffc6374c786b5cbc7289d1440c4a","sha256":"00644443959c2f068930133e745eefb161986f292f4147a6c45aeef7bfc0e180","sha512":"3f6b95251211765cf1c81e58d5fc4fb5cad4b497cf31c5363b27cc36ecbe51e44e9495bf12a5431b87f3054853f59373d4912f5f4ab6d25fddc056aa544a7a2d","ssdeep":"384:KjwNWJG5yVATipbkxh6X31is4c2khffIg+YpXWeMoo7lsH2wVZO3z2IgMrLA+ktO:KjG5c5P4NVuvSOIcqH","tlshash":"38f284225335f13cf577998635806ede30648b1796339afae492a43dc0c7ae2276778c","first_seen":"2025-10-15T03:22:35.353663Z","last_seen":"2026-01-30T14:20:26.865286Z","times_seen":200,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/webpack-8441cb4779b35f72.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/webpack-8441cb4779b35f72.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jn3HdIsFQ8WWXJHOf2TL3H3w8mDpTOYxq%2Fxox3H5ygMA47rZGRUPMmSJfhoc1Iix9ClYbHTerViePwiNUccTmbEIvy6Ftd90nw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d037b0456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18254,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18254), with no line terminators","md5":"c47809c7e3694245517b22d62b33e571","sha1":"2d4bad718bc9214f25e939ecde53462550228f2e","sha256":"1ff5db653fb24edc5d5d0068602b8196d320ccf26f523a7f8b01aed6b52e1839","sha512":"ac9192978c273386a1748f4d1490d64c1e894418ba13e582c09cf9440403a2eba7e02b1af03725283adcbec36a78fddac2622f3ee263f5224eb617321cfdcc83","ssdeep":"384:Qhu6LDiavH0qIc49SNj/OiatVzpqBmCBrD5qeqQM8F7PHZ7KtfC59dRQt:QKavfIf9SZDatVVeND5RZM8F7/Z7mfCg","tlshash":"81824bfdb35cdcea2d3105c26c1760e4761871223c0748e1b1eae77600b6db5a66afb6","first_seen":"2025-10-17T13:26:51.062589Z","last_seen":"2025-11-08T17:30:45.230165Z","times_seen":122,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/app/layout-e1318fba240c7669.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-e1318fba240c7669.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PK3TW3Fjw1AsVHep%2BjNqnnVYi9%2BM4BCoV%2F2uGrLnnrt%2FHmvn3ZjGXFrwbJ%2B5gywPUyx0epPZg8T5dPUp%2Bynm%2FrflJSfbrRBidA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d037b1556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201567,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7d41f235482170c8a2595fefb3a0ad9c","sha1":"3056b48fb4ebf6e8912719713646c8a3ae8978b5","sha256":"f882489484f794cdc46128ed4ce302047600faf34b384d77078667243b05045e","sha512":"8c54646493a82de6422e9160e93c4fb7ea8464a01d45b51c6bfe94f67d1f29309ea3f002c0ec9c841a06d59c86ccab35dc6ed81e5c977ffb5d9469ea0a727d12","ssdeep":"6144:LdGqB9ykZ7BLnoVj/4D4mfWyDJf49jG9p2A+My4xOy+PuE21QQN33JeRVZeNEq2+:ZGqB9ykZ7BLnoVj/4D4mfWyDJf49jG9D","tlshash":"7b14774c87aa02ec6f995dc0c607748a4fd19513aed789fcdab9be1447b1aee1310f42","first_seen":"2025-11-01T20:24:34.095819Z","last_seen":"2025-11-01T20:24:34.095819Z","times_seen":1,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/56060-8656721e7f9c8859.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/56060-8656721e7f9c8859.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OzvtaZik72EBkyT7MJIKr7cwGPqdHHHM0XfVGRcQkPQyD9X6KMbD4A4VCqqjf2TyloGPrXJLg6upFCkBLVnP0vvKdVR5zR1Xcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d038b1a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10031,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10031), with no line terminators","md5":"6685f1c3cdf6f0d1227ab2b5af23a056","sha1":"491d91380ba5da6dcd5027bd954e6fe11103b18b","sha256":"237ff25124f0ca73e06c9e1d59caadd016273fa9b5b6bf211c991cc8d34d1b92","sha512":"6667f2ba323afce441aa6e23fdcb8504dfeda05286da37d594827c605042ba88ddd7bc5c6ec9565109d4a0ad4ddc9f8cdde4ca22cbb9eb8122b85ba04bf1d0b2","ssdeep":"192:/ztywjuim2pZQizyySL4tLg6SpiQhQ+YmzSRAz21OfsuAAuaSXCfb+e:/z9juim2xWySL4W6STYmzSRA61gEC5","tlshash":"4622ea847260793e1547866fd1be5516f27a292e382ed25433b9c83cfd21ac85336bec","first_seen":"2025-10-16T04:05:32.850927Z","last_seen":"2026-08-03T21:11:49.411711Z","times_seen":18237,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/58172-2e2ad5efca352ade.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/58172-2e2ad5efca352ade.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:01 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:01 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=llx62qN5upWJiVQmtDg8gJNOttof2C%2FOmL4M7dFwqjcGfuYwvpOWaJipqkb4iFURARIbd0CSu%2FMYgkB%2BRi43U3G1IK7Uap6gEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d03bb3d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15156,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15156), with no line terminators","md5":"a9784916761bd2bbc76012952021d42d","sha1":"253cf85cec6b9a53b449d758e2d542a9a182bc23","sha256":"c0b7563919543117a0168d95e03a8812821df1f79a8bf094dadda24536660d92","sha512":"54d0abe66c6ec80868c406f1838ff8760bcae6758bd406c57e29d3ae842812ffb81cb315706c46e5d6a26e8bb80c7b1fc2787d02e360d635ebf22aad6c3c7431","ssdeep":"384:H74ml/FeOUGcg70p+tlof7VCEv/f2rVdVOmo778U/eWJV+o6:b4mldXUGZ0p+tl8VCEv32rVPOmg8UWWo","tlshash":"cb62a6d12b10495d3583ce7aca363929f2ef69ba393d57401168cb3cfd18ad4e6361e8","first_seen":"2025-09-13T11:18:32.621492Z","last_seen":"2026-08-03T21:11:49.365569Z","times_seen":18259,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/82849-380dffdc0dc4ddd0.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/82849-380dffdc0dc4ddd0.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NAcYXCE2HAkJR5WEJSislgB2rm7OkLb9u%2Fqfo4KHl1Xx3avMTS9TbfQ5p9zgSQSD6B64I%2Bgc9VE5YDUEw4OjeVFn2PWzZRD01A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d03bb4956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":178013,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8b2dd0a100347fd3f84d241021cdd6e0","sha1":"52683de19b9bddf38b646469032b1ed204fd633c","sha256":"ead8fc5762bf83c3e5cfa97570dde8bfc968a4f3b34eb45f22b063d00e408a1c","sha512":"5bb93fd32f7c31627654dcc091b930d97b69eaaf3664d0d84f6a2d01c6695bf0492cff6639f69af8d9d79ea2e51650a242e9646457b5920a45ebc40a78e67bf6","ssdeep":"1536:4UcXlryCtX55mQPVpmsuIurLJmvU340MLsUDG3BZN2EaZxVcGR5c7dhP3Whj21m9:3+v","tlshash":"6604d5debba0a2f4f005e7f8d7125468366b39fe6e52ca68c3a91d14e90108cdd59dc3","first_seen":"2025-10-16T05:32:37.319774Z","last_seen":"2025-11-16T01:25:44.555828Z","times_seen":423,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/global/fbq.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /global/fbq.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7theUnwQbn9UM2iyzWLoZpvkc90vVuoz8Y18IBwIG94vJ1i1icjir%2BD2pldX3i8ZY0gKZf%2BVZqrJ%2FGBVzzmaJ1GZNQsS3SytOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d03db6056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":408,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"0b834c87557376668b3c3fde729a8db5","sha1":"872448d973ce02e75d52b31641d961601167d04c","sha256":"cc63b490224b081fc3bef6a696dc3ecbe7ea7bd45df00c8a53cfe304e7bd5469","sha512":"1c40528c95bf8c5d60ebf3dba6df8ca43390e5239ea50ef08705e547c48635a1f399f2f9d7207b4575822d2ce3dfd6e2b7ef7ee3b431255837cf2545ea5ed4c5","ssdeep":"","tlshash":"e7e0619f2c43b42733e97639c727a67b3763070178c2d919ba05c8151fe08966c96d9f","first_seen":"2025-03-19T10:41:28.92776Z","last_seen":"2026-08-04T00:23:10.736536Z","times_seen":26977,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/app/(auth)/layout-21ec38ef81635840.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/app/(auth)/layout-21ec38ef81635840.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ATpTpcosew8bgVlynrRG9jEtimE3fGeYwAFAlJalEH3FWP9VFNilnzGaOkr6ZlKSe4hCzpkBVnXSWGqlg6d9THMxvgWc47DcUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d03ab3856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5634,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5634), with no line terminators","md5":"eeb148fc570d2378a9f4fb4cef9277e8","sha1":"f15bcc479e6192f1c27e2c50e9957c34d69e1dc6","sha256":"28e0352c26286fc5b9430539a76f6e36d0f8ade3679fef2b830ed3805fb8b690","sha512":"0d5e4e9dc24973836af109e4586ee36dfa759ed54863e94049c0c21323043a57cc61354a7d5016b098e269eaabf1fe4be8e76ac9b487c6fe54177f0e396d92c5","ssdeep":"96:XZ8Q2TeV9GCuyzz3qZqCLXx29Hn5G9UV3aQ+7XCrUBTCUBTVy19GCOsY89GC4b6:p8Q2TeCtiz3Xqx29o92d+7XCrUIUvV3g","tlshash":"70c1a5b7b6c5fdb2565688d088378207ba503d37205fb480a7facce53169dca44d1f8a","first_seen":"2025-09-26T22:32:24.049018Z","last_seen":"2026-08-03T21:11:49.409966Z","times_seen":18266,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/34230-e87c8d35c9fa1ab6.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/34230-e87c8d35c9fa1ab6.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0sse1q5qaGnKFGm1ipQwFNwYmiL%2BZuxxJfdknIcYyTO0Vj0RgboAl3GUaIxqK7dDOLIcUEKeMiFRsTVY4prK37CZjcfOc6ClVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d03bb4156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23047,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23047), with no line terminators","md5":"9b4900ae7910372c39f90a4ebc702603","sha1":"9a24a588c269ce9c3f57345c32fc19f6681dbc0b","sha256":"09f6962b4e78defeacf0013f19bf739d5427801904333b19f9ab4cf541db3440","sha512":"4a02c00c407ec0eee649e22031775550a2e27fd675d23235783ec11d04efda2480a219e318fbba5739af05b0bd575f5d6d94a5a5dd2db29a03b891b9ba3069d4","ssdeep":"384:05ae/t9qDM109qxJ7aPk9RqKIyoIPzM73I/AKIJ1L/7E48z/08zXvnL5/Tz7qt5V:veVwDM10wxJMKIKIy6IzIj/9KcKN/POB","tlshash":"b5a272c9a390993d2583c53fc635b426e2bf09fa753e534062a9c63df909cc4e7365a8","first_seen":"2025-10-16T04:05:32.834372Z","last_seen":"2026-08-03T21:11:49.392671Z","times_seen":18187,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/global/fonts/proxima_nova/ProximaNova-Bold.woff","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:02.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /global/fonts/proxima_nova/ProximaNova-Bold.woff HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/global/fonts/proxima_nova/stylesheet.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: font/woff\r\ncontent-length: 52068\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OVuJq1suavBPIBCmxpJxkn2z%2BJRf9JxCS9XKB1TRClBkB0oFk4SH37Zv%2B39l%2FLGGt06KyoYtrx4bAFBswlx3a5lNwEmAYYUV1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d06ae5e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52068,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 52068, version 2.3","md5":"e2cf3dc2f079bf3d5185a02552f153c4","sha1":"9e900ba7e0890a12a5697fc7ce86c058b145d215","sha256":"99a24fdd4e16d8dd4fdd79a5dd2dd7b71c2c68473fd6b3cb4eca4fa3f33d9ac1","sha512":"1043f0d116fcda17bd933ff2594b7c79a1fd41259f28aa8283d90e1a56eb6b8830861f109f9eeb3b81d79408e8a6a3648d973ee8a42fb5c096b0f84138392935","ssdeep":"768:gUZ1BWLCju+iIoHoWcknJh+7x77rai9YTRPxnE6eWPeLJWPznTdpjXeE8vFmdn:fX6Cjuct8QxDai9YLE6eWGYfbX98vMd","tlshash":"2433f1a524350e2797b7f4fa349d0665cfc6024db42b55faa4cbca019a5bff8b530823","first_seen":"2023-04-07T12:58:50Z","last_seen":"2026-08-03T21:11:49.400959Z","times_seen":25334,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/api/extra/promoIp","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:02.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /api/extra/promoIp HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tefowex.com/\r\ncontent-type: application/json\r\nauthorization: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:03 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2nip9fc8h3ErY%2FqlFnlm6uH%2BZPgXCtw1c8MViaOxlEMrkhqKI4xqNS9qDm6ifjDTfGPDzT6J5LHPdY%2Bt6PnH2KvqTumBGXrV%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 997e1d0a8a0056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-04T00:33:09.987745Z","times_seen":179747,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/greenColorDSGN/mix/landing/logo/elon_musk.svg","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:03.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /greenColorDSGN/mix/landing/logo/elon_musk.svg HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:03 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:03 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V0z4VovPJ6j6j78q8IvlPcwgZEOFJqGmB9GVAgL5I%2F7z1I9V%2FhycjB5CiFYUruxpJkNPNL4tKWwGPTcvUPSfcjYFFd%2B70GxJew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 997e1d0c0b7056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1775,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"51af3ed9a741f13b23e3755d13a532e4","sha1":"e1a5233103a616345e7f7ab6fd0e72edadcfac63","sha256":"c5ae544d38685379d9c9e6e455d26b79ff945504417348da4699eebf17210150","sha512":"fd4ce5c6259a2182399347a9b3ee28eb185158f89495d48c2c12fb3738d9fff415ba7d48e402c2cb9f6db52c9d19777419affab6d443c6adb65d7ef272e60254","ssdeep":"","tlshash":"2f3165a023f8025cf10972fc615550625e931cc29e96423af76d1e89ebd016d4f9addb","first_seen":"2025-09-13T11:18:32.035799Z","last_seen":"2026-07-24T11:43:26.986487Z","times_seen":781,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/4bd1b696-ad7506e6ce5b48e8.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-ad7506e6ce5b48e8.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6al88AnzPtGF9sBmcRr2giLeZmpgudcC841Wm%2BI1fznzWNc%2FN1d4%2BIxQLffwYF40fyl%2B9dQRYpvlFpM990YR7qYwgjDxlWOt9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d037b0856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168420,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"15510eac41ab1d5ef4d07adf66470336","sha1":"af7eb0a2168918b5999e83b71a10ba52809f38df","sha256":"e5b9e2570593ab1e59ae6a397baec8491e4c3d5e4628aa1439940ac0e2aee2fe","sha512":"116e3ef82cb1608f729f9731bf3ba61a1a75624fec0adf57d0536e5f7e1abae6c939e93af5bbde399079cc1634b5ffda250a76f08571d2e30c88eceecd05b22a","ssdeep":"3072:btfjLiM+NFCC4YQbCCAaI/02UHCgwLRE4:btfj2ld4Y40fUHQRE4","tlshash":"0df3f7e83d99e2116eb342a7109f2803737c262b240d4c60a615fd9db5b845bb17bfde","first_seen":"2025-06-09T17:09:55.347659Z","last_seen":"2026-08-03T21:11:49.38186Z","times_seen":18346,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/31684-b8837a619f76486e.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/31684-b8837a619f76486e.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VmSRaxoILFNNk0VXoVRUg2wU0CHC2YaBAfK3UT0ycb%2FiK%2F1UrBfa2DN1sKJCAdf74FoWJkFckdf3fOW9RBKop%2F4t7qZqaoIVBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d037b0a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176018,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8c9e1f9e9713d9d76f976369dac25760","sha1":"1d7cfa0fb89dd89210e337557ab9af8fcb9e7e17","sha256":"07adc3c304cb5798f2e26622c0215307b7b65a7f8bbb87a32f44832f781b75f4","sha512":"a34dc478e1f217f0cf2d8a2c291b933dfeb5121fd41a2f08f2ec3a5b526ca55babffd1358cf0b55ad15009821510b7f6ca9a66793931023d3910d85938ff1b0b","ssdeep":"1536:3Hk+1qVc+dJWgclHHlU0Zb8OeM8aZLoEAEuRaQ3aTcXH10nZAEUOW/oM+G6GZVsT:VqW+dJW9xAMiEuV36XZNGZm01A","tlshash":"5704b8b676d0f89107a780d5843b400af3395c3b146f74a0a3e6cce975645dea1b3faa","first_seen":"2025-09-13T11:18:32.512742Z","last_seen":"2025-12-06T23:52:39.117547Z","times_seen":597,"resource_available":true,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":491,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/63712-a16fb043cedefd4a.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/63712-a16fb043cedefd4a.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LEdgYW5KDyVFs3utmKZ0vP9UAwloiw2ghmUoWX%2F15POhCGOpBrbNYAvjGnXLlUISNThgT9fdNwohinKH7hPFG3Eha2Jt2%2B7XCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d037b0f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22721,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22721), with no line terminators","md5":"614fe7514839a09db165d48ad01da840","sha1":"e492263f454db98a8cc2c89c777e5572e854e343","sha256":"4974bda3ce7194ae592697daaccd424e6e8e231bf15187182bf4d16522e9bffb","sha512":"7eee15e6bce48c5b1adfc53ecfd7492109fa6272d866622f055b91ccc80e8bb4e9fdc350413cf4282d6b85b13fa72188cc51445cf6eafb6167d149ad45af1b8d","ssdeep":"384:RSHQzwzI46bFWDyhQ1qqo5W6m4WIQgn1fy4GaQANJVOPe4+snOcT34McbAmrh/2:/dZsunDqNs/AFD","tlshash":"1aa2b449b9d1f47453a3aa51843f440bf2674ea8a05db8d8d367c9e5adb888e4073f3c","first_seen":"2025-09-13T11:18:32.286663Z","last_seen":"2026-08-03T21:11:49.386391Z","times_seen":18266,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/53090-941dd81da5fa3210.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/53090-941dd81da5fa3210.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ibr4pwzT9fgSHzPGBi2s7R%2BeYQT7H7DpVXMoy5QbkufdKWE8jBrncgftoXUL%2B6vYFYT2MIgPZs5iCvTjXy2UQpW4jtbeYKn8gw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d038b1e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15666,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15666), with no line terminators","md5":"15925877203605d5f2355beb36d57347","sha1":"17da103edacb7e181adbf9304938d039a200c1d7","sha256":"a986f72fb7dc330235296b864ba0f244f1126b2eff777b8a13ae36875dc96157","sha512":"ad516778c2e0dcaa482b03f5ab7a44fea87ce340ae85aba921277db245d9e6c5a49f70a27eeb99b6bef662c873647590edc83e75c63116c4e456045245b91568","ssdeep":"384:hC/SLOZgztFl6pfisYkxdZEAXtwdt4DvWmV9PvTLsb6r7/:Y/SCZ4Fl6pfisYyZEhdt4yIWbU/","tlshash":"0862c6e0d362fad8ed6785d5f12ea906b11f2f988b19c074f6b85c2053181c4ba27b9d","first_seen":"2025-10-16T04:05:32.826709Z","last_seen":"2026-08-03T21:11:49.390909Z","times_seen":15980,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/53331-b84ec44a66d742c9.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/53331-b84ec44a66d742c9.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ZndFBHHDY5PyKYm72cRaqUvqENmlCgIbMn1KeHqLU%2BU57d8E11FgCCOkTsCQY13PSKSfSKL5ZF%2FGkT2kFvlqJc1emxVpL6XLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d03cb5356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23606,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23606), with no line terminators","md5":"ffc2a9646f640ee24bec96371d8896d5","sha1":"43fb84011d63dd3ee53c4c5a6ed7bee651bc780b","sha256":"ee75b3f83f6bb1fe59b15f18a040463973036c403110a597b3e77b659b240fc9","sha512":"19765f02ce6babd708e5a582fce2a697188168486b56c78f66d75c7ad4d29e02371f839d2b967fa8094e949f2fa6de2e478d24e24b3150f0eb404dcef6fe63f6","ssdeep":"384:/bEM6MGSQhbWOoOSQ6b82p7X4WsIBcf9CkSfA9CM3ORBq5T25iaTuJ8jFNDtv/LO:/L67hSOoe6h7X4WsIBu9CkoA9CM3OTq1","tlshash":"63b2d7e993f4b6e0a006e3f8d607a8793a6e19fd7b32c95893d95c20c5910dc266ddc3","first_seen":"2025-09-13T11:18:32.113392Z","last_seen":"2026-08-03T21:11:49.422549Z","times_seen":18247,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/greenColorDSGN/bg/preloader.svg","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:02.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /greenColorDSGN/bg/preloader.svg HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/_next/static/css/dc249df9fc15b505.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cv%2F0Sq6Vg90QsnuPtysD2H%2BJlkT2CQ4iOogYLsQlDof0Ia%2B63zjDEVi3vndDVeu3jsgF0QwiiKvfda9tQpNtqU3g5ewe66X%2BXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 997e1d06ae4f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1652,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"d4cf0d8e07d5ff0a22dde176b5e6926c","sha1":"bb3f41bbc80202459f3bd9a27054f855523f8ea7","sha256":"caa934ceb360955e8ef4eae0984d9ee475137fa2eee2b013586e25461bc1703d","sha512":"03fa93b18e1610abefaaeee02782234d164bd6de0d27aff61c5aa02e260d50e0b69233306e46bcabac18c6de2ce085a5859bd4ee71c2480acb0e4a719a3c5123","ssdeep":"","tlshash":"703122c04abc425cf604a6a9cf122875be1a64ce578564baf3ce9d06935805b8e0299b","first_seen":"2025-09-13T11:18:32.012309Z","last_seen":"2026-08-03T21:11:49.396322Z","times_seen":21993,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/global/favicons/greenColorDSGN.svg","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:02.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /global/favicons/greenColorDSGN.svg HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U3jzHlzC6WI894%2FInLiAEdvVb8Db8oHjcNAAp2F07VCHSswlTHAuyPr%2BAB%2FQ8HHtWnEja%2BDnEeDD9VsPTlIl8e2fW3RaWjkJ4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 997e1d08c89056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"50679c0c5e3ed56d05c1d0ed312419a7","sha1":"f9ea27ac71a78da2d61e14b84ea77ce447920d9d","sha256":"c164e1ea36438d14fea9b88996d154275a4c92fd80bfa082c7e00a343f241147","sha512":"163d4097d60ecdcf58cd01ea828e74491b0e27fcf3d40a2e7c56e6c90042d6d9a9b6cb18825052caf8799836ad35a44c1c88ffd2c35ce5d888d23716c27dd0f4","ssdeep":"","tlshash":"a4312e9e77fea185f448e7f8023999b932d36cd33a04d8282bc00c02e98091e9c9588b","first_seen":"2025-09-26T11:40:39.971586Z","last_seen":"2026-08-03T21:11:49.42349Z","times_seen":21983,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/css/9fb025aa9cc423ec.css","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/css/9fb025aa9cc423ec.css HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nDoD8s4iNSJi9h3F4N6moMz5qYjVwEMpiFMXaYhrHRaB1VDP1rYzxJr0rerFe1suvrdEhvc9Md9O5v8RKzhjqNPkSv%2BNIQ%2F88g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d037afc56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73829,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1f9f7faf9d251ba777f6acccd5cea298","sha1":"e6495ba2442d546f20a6d77e052c00a3b7aeeeba","sha256":"3115044699f91224325ef4ab722990cdb6e39ffa9700376ac1ce31d5286eda7a","sha512":"568f841bbf827991411ac91e4c1a42a9f626468fa4fd8095b5a1e009003de2e88739f87fa004cbf77b3a043e925d6c05d1ed88d5e5d01bd2ea1d39cbf7793e23","ssdeep":"1536:9zr9u1kzyfV8n/+dEb/G++LnaFiDsyohZ0E:9zr9u1RA/+dg/GYX","tlshash":"5d73b6325234a53cb6e7d422b5d45ace312ac643e6330aedf559bd3984c72933b63788","first_seen":"2025-10-17T13:26:50.993038Z","last_seen":"2026-01-30T14:20:26.863479Z","times_seen":119,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/4533-d42ff445e36846e9.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/4533-d42ff445e36846e9.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a2zjjyNOPugq38xSkuFuRH0uU81lpUMekWUmI4nFMM4n4UKPHgJgZ9yzS86KuNgwjumLbbXXuBSYj7zBa4%2BoiY2GDSMqNnaF7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d038b1c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":950242,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65352), with no line terminators","md5":"46776d4342c6579718ac5c861e285fed","sha1":"8bf5e2594560deee2c39fd0e73e43b36f544218c","sha256":"69ddc7de0e59c5fd911034811635afa02a5e9061690b4031d3705dc719ddecf6","sha512":"11d8a1c627656fcb7eeb70705d6d26f9d481e75ae8557947e8622563b065a3c8c7f0527154f24e04417c448b2d24a5baa6d0c1c86afd5fd797dc0c1797cf2792","ssdeep":"6144:+w/lsfDuv+PunKOuelr8jbdfjuNxd7dB63Alr47Wu58wMQTMnTI8HJbt4KOHC5VO:rhnKOPR2Ida3qNuVMcsJlVdJds","tlshash":"55253c39854937f62bf3319436d66bbaa18e9124c3d4e6dff0e5b119018ecd4902daec","first_seen":"2025-11-01T20:24:34.114904Z","last_seen":"2025-11-01T20:24:34.114904Z","times_seen":1,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/58211-c087ffe3e38101f6.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/58211-c087ffe3e38101f6.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2Be4vEBlZtKkfJ7Eyzcx0KJwm9C7BlgSqobwRL4PpND6Ah%2FbpzCamTWQ6AuodXzyKFMvYCb%2FgyMOJpvsozKBRBsrhJZiiDWtUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d03ab3956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39725,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39725), with no line terminators","md5":"f7d84948f8ca0ff495e7533d0969b670","sha1":"3330c776cfbb7ea04d30b89a9686eaea35f24747","sha256":"2180eecb87df810a0f91771ce87e9c4f6e185e9011d00147eef0ca9c7ed750c1","sha512":"04a5f0711a52dd8bcfe0ea6d66662ed5e0a8610c8caffe461a8c8178f8f40e55b4c40c7ea11716a7dce1631534f5e22f9c5d86393e31835bcc686e4aa6254c85","ssdeep":"768:01KE8vZ7HInPlFvvb5AvexGRrxVP1fr4UK1fWbqYsCL1fZnK+jBV9YCO:0voWV","tlshash":"f20399866740a83d2587c16fd63a6415f3bf14ebb92f9390219aca3cf506dc0f5365e8","first_seen":"2025-10-16T04:05:32.927959Z","last_seen":"2026-08-03T21:11:49.391803Z","times_seen":18193,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/95064-8ece3d2817a292cc.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/95064-8ece3d2817a292cc.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6RRNiC61Sya1R%2Brn2n19KOh3G9HvrFLjKw%2B9qeNa%2Bbwb8qa6t1wcSdEGB6aF7%2B7zx95f275mSCCaak9phy3MHhLZufYIluwHTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d03cb4b56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15030,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15030), with no line terminators","md5":"1820ac6716b4d7fabd4dc1c1f875bf6b","sha1":"572e78286fc5400c9ae75eaf833f43b33d7374f2","sha256":"e10d260450467cac4102b28d0e25aff8e28aaf534178f2db835f27ffbf2e2dd1","sha512":"52e76827863a4baf602a24c2413c48cf40f80113c3d950c2f2ade8e9c77497de7207a1ce270d6467f01cb439d622efb0c06dff646581c420547ef8bbda8f43c6","ssdeep":"384:mTEzSMQjeMy1BHBB7V0BvDrXIwXJ+ba2YUSTNN8txdOTTpPNUp0icpUAHEvDBUgx:wEzSMEeMIvp0h08J+G2YnT76WM+HTY","tlshash":"0662a42e9175adf4f2526c689faea40c719f958a4b1648bd777cbd3000894ec3b137ca","first_seen":"2025-09-13T11:18:31.957785Z","last_seen":"2025-11-27T20:26:36.441914Z","times_seen":547,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/53069-c58f8f632eda4cdb.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/53069-c58f8f632eda4cdb.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8xa0p%2FXEweO%2F9zYm8nwgWMFHSMLGnkhkyNUkfSfAQhxwaWU7AL7DThZ9e3P0y84a2hP44iADh%2BSIUIk1gMIoK9szsqI6ErvM6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d03cb5056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15861,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15861), with no line terminators","md5":"eb5ebba3d13b139e963f92eed5ed1ae6","sha1":"982beca71526f6bebc0f559a33e89a19d085084e","sha256":"1d46995d13a153216920d2ce27849f090e18202876dee75180e916cb14ce8aad","sha512":"4873bc8d7932e3e1b23bc0a868702e349fb4ad52ba80c387d6591d427095bbee847bb27989590aab9942cf2547ba02619b6c085d1d7cda2dca68fb9494b5ca95","ssdeep":"384:Gx+QZybNhuWIpYh1IWtfmg2Lr4i4ysxQVv839TORERMR4e8TefNxBc:y5kNhlIpYPIWtfmgcr4lysxQRkT+4Q47","tlshash":"88620988a399a6e0f6819bf8970f611db57f32a08a49c8a4f3717d3060854ed7e55fc3","first_seen":"2025-10-15T07:59:40.138236Z","last_seen":"2025-12-12T15:33:14.449717Z","times_seen":82,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/global/audio/message.mp3","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:02.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /global/audio/message.mp3 HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 29091\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LLb7V3f2RkJa1Qg6OCIw9LUe6m9P67yfJrd6Uc2d9cqI5Y7qe5qWiJPG80FFSPp3t5qkoCInGHK1bnFkiLmQgqqRHH%2FZN78r9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d07ffcc56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29091,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"a74d3b2a2dee5892841f7e37ae8343a9","sha1":"90b69421807b860b265c34a5e2f249e3fdf05ae8","sha256":"7bc02c22f6a0a75446187dbe0547a7eca86c05e3d3d369e0831dc084bb974ea3","sha512":"7186807bb91804317231d48b985557d4259820c45cc6ef48fae69cc7f50b7195b1fa9c271aac9c2104b7cd0a48a772a9223db8f0e4f53cb2302bc401246c0f9f","ssdeep":"768:OBdZJRccW5UzJDDNx5kbu61m29Ij3Va3ZH0jycOFFLQU:0JRJW8DDNOu/j3VaJwyXv","tlshash":"92d2e13b2d840d8cf1868574226fd588e0b97c9a129e5f52ed9feb494637031bb08fd6","first_seen":"2025-10-06T22:40:31.572152Z","last_seen":"2026-08-03T21:11:49.401761Z","times_seen":18108,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/73345-b438bcc17722696d.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/73345-b438bcc17722696d.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2B3p9s%2BRR%2FfEyaM8DjBrJOzAzsBz61l60TjpHO6J2r58pZJLHqArxGIPsuB2L4EkExgR4WbDbWx9%2Bhw6rg5ERE5bkMmpdn80DQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d037b1756c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":325834,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"eb597de485c3029dc93b6f3225acc0d7","sha1":"d3a6bc9d6749ea9f0ddd1b1862c90303f3ec3254","sha256":"3513d69dd757c29044eb92ab6a908ba6755e0845c38105ab2e196b0c75b96583","sha512":"1420716788ac11ed76547147942bdf2329c1bcfe8770745c3bbce32f99ca5c5866e20253ced9e0ebc4597003f7404825de2b601f8d24b5c2fce1125eadf0ad63","ssdeep":"6144:bV5sFqdfuGDdF0pL8sS65eILs3QKQmiOB0lDz:bispi9mVB0lP","tlshash":"ef644a9c7682b474939b016a807f0107f37e2d57240e4824f270d9ee7975e99a2b7fb8","first_seen":"2025-10-16T04:05:32.880573Z","last_seen":"2026-08-03T21:11:49.415162Z","times_seen":18229,"resource_available":true,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/main-app-fef4a8898ec7782a.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/main-app-fef4a8898ec7782a.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=skU0mJLK8tvRNYT85ryzilq5mtMPzbLcl8VQw3RqwzgG37SBT4c9YysFhhWFykyAt9k5Zcnw7O9Ijy7ySVr8FAlsUKxbbXSUcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d037b0b56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":537,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (537), with no line terminators","md5":"c06acc17c28c2888a1a2466b0a0d12d8","sha1":"63d7278ad805cf6b27e6fb76daee100f7cc61afc","sha256":"90a949795e63ad10200d2f57df2706979fd66bd412caea2130a9c707e21c5d5b","sha512":"745f5cba8c1f8c006b2d9a1f8ec15fe3e66d7909766f446755243e1b63aa4d611233d9fa175bc9001bcbce4a4a782e79feb80846ba96f394b38c1ed2b1f3c2bc","ssdeep":"","tlshash":"f5f0fba55f0df42f5d266e74fd97ace2184f4275206b4e647d01dda23c67b6cd260408","first_seen":"2025-09-13T11:18:32.65005Z","last_seen":"2026-08-03T21:11:49.431287Z","times_seen":18315,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/api/extra/pixel","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:02.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /api/extra/pixel HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tefowex.com/\r\ncontent-type: application/json\r\nauthorization: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:03 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FY9NsSH3Xz9xakNGGIhcb3TBctuAAe8fdfiNcV6gmwz17zqj5XK302oaWja1KuVMxKFoqbI6az1V%2BrbEBSSDT%2BE0VN2XAYWieA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d0a89fc56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"428647be4acae0d85bd0799a59237001","sha1":"25b1dbe5aaaf5fe53a11fdb05fd14bcad3e92ebb","sha256":"edad519cb99926a099d84224b6b7427bbfbaa60c6ecc1673c039a0723be93006","sha512":"8ed0b8ab8b00e7883301e4dc47e6ae3c38abe1686e6de48d43983fa8105203f86c36b86cff1a09c9bdf9406ac7c4ac2f8b6a8654a42e1b5d03d843b5085428dc","ssdeep":"","tlshash":"f4a022c30a200bc2cc00000008203b22eec823238300022bc00c0200caae0fc30c333e","first_seen":"2025-06-04T11:30:16.150294Z","last_seen":"2026-08-03T21:11:49.388173Z","times_seen":17455,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/global/fonts/proxima_nova/ProximaNova-BoldIt.woff","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:03.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /global/fonts/proxima_nova/ProximaNova-BoldIt.woff HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/global/fonts/proxima_nova/stylesheet.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:03 GMT\r\ncontent-type: font/woff\r\ncontent-length: 54636\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:03 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2F9jhsfU6bbUjOXe1kWWPh0sZfQyWy1W9iuctPuijqFQ9PL%2FECxIF6qWKqSRFhThiu5Hmlc8XVgfSAHxBvatA6ojf7Yt9U%2BRAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d0c0b7256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54636,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 54636, version 2.3","md5":"af44a852757d1cac8f2ff15e6de18ae5","sha1":"991dbfeefb41380450647d4051337efbdb7ed534","sha256":"6ef0b2496a939cd7074c3f34d6402aa896a3b01ff2f31427838fc65be2d92f5b","sha512":"34d7d32d0933a2ac6be90aeff5e02851cd52bb56d27dd4c48ccd03ba42eb6cc4f5e2ee64593feb6dcf7a343de4fe7d300e7d0013b21ad205980c23b6d911d3de","ssdeep":"1536:qNf1/aWYBFxXthMkoCiOq3uDe7UX+qswcbX9Q3/R:Y/aWYBFWR+q3D9qswcbX9QvR","tlshash":"3b3302f29368d180c6fdd63f2e754fc52272c3c082e314f99799a90226e49fd16067ae","first_seen":"2023-05-22T04:12:10Z","last_seen":"2026-04-07T03:54:27.297779Z","times_seen":311,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/api/extra/promoIp","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:03.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /api/extra/promoIp HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tefowex.com/\r\ncontent-type: application/json\r\nauthorization: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:03 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=trp0BBiOGwixFiSMjS%2FutOAP4o1RnbOncin1OVzTI9c1MXoEdxqYxRgWG0XPY3%2BO48%2Feom6Ymezr6I3sa1xw5DPStYV%2BqKecCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 997e1d0c0b7456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-04T00:33:09.987745Z","times_seen":179747,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/greenColorDSGN/mix/landing/logo/elon_musk.svg","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:03.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /greenColorDSGN/mix/landing/logo/elon_musk.svg HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:03 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 01 Nov 2025 20:24:03 GMT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YoMzmORbPsp4BJ8FVmRk1%2F4iuKvxeTmqSfr91RzXIgsDoQjbjUlvGOMjN1STsw%2FcCBIvz%2F8mXyAphdF6vO%2FvdDdri%2FEW3TBRTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 997e1d0d8cdb56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1775,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"51af3ed9a741f13b23e3755d13a532e4","sha1":"e1a5233103a616345e7f7ab6fd0e72edadcfac63","sha256":"c5ae544d38685379d9c9e6e455d26b79ff945504417348da4699eebf17210150","sha512":"fd4ce5c6259a2182399347a9b3ee28eb185158f89495d48c2c12fb3738d9fff415ba7d48e402c2cb9f6db52c9d19777419affab6d443c6adb65d7ef272e60254","ssdeep":"","tlshash":"2f3165a023f8025cf10972fc615550625e931cc29e96423af76d1e89ebd016d4f9addb","first_seen":"2025-09-13T11:18:32.035799Z","last_seen":"2026-07-24T11:43:26.986487Z","times_seen":781,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/css/a0b6481c832f0cd1.css","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/css/a0b6481c832f0cd1.css HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g3FkfCROlDbhauwX%2B0SDYgd4QtV%2BXf0u1SF6P2HZsrmCjHHx7o9Oknb3fPUVoeXRbPtw8u34ssABQ04ruzAwK6WsTvtRGNkR3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d037aff56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72510,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f943c828316d861c0e170671ba597068","sha1":"c2b2e4ae7b688fe40e84dadbd75bc63a8bfb2b34","sha256":"c632b180f549b7e88c9ab2db5769ad5264b7dc2b43c07c9ad8c70aba5c122a06","sha512":"e1467d85dbdbca91b2c6644b36086cc9074cf8c4467b96edd1b8faa208c319f48b214e64144de6a5d41e185f00d9ec4709a6f2cd38cd1c8a1cb5232770c6a052","ssdeep":"1536:khldf4YFN6JUZqCJIbidBz9XMli9PozWNw9cXMomUgefzXu7Z:+36B","tlshash":"c163a8315238f53cb977a81371905acf7068d503e5736aeef964b93a80c76a33a2234d","first_seen":"2025-10-16T14:33:44.874398Z","last_seen":"2026-01-30T14:20:26.864524Z","times_seen":430,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/dc112a36-4dd9553e3950a789.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/dc112a36-4dd9553e3950a789.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ngVyjr5OUT%2Bsjkad515hPYQU2q7FEe%2F3J%2FeJXpqYkuFVBCRCtuyi4DDn3kpC%2FNEXHyIz36aBADrOpsLlvbA351YA2pRRtV3Xcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d037b0d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":305838,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8b0312e3e2ff7226227ee081f6693db1","sha1":"823c7003795d9623f8992900a6f337f599bb7eda","sha256":"dccd0125f7ca7c6c5f3f8ae7d813743257cb55899fcab2d63b70fdf06b2a05e2","sha512":"612eb966b9409ee719588a9f82170d4d6c9b5c075b85981a1ac0dc0fb8119997de7f6a139ba2908d7ccfe0ab342f452e39ca15ec3d9fafdc1c2a7d36cda06d87","ssdeep":"3072:Hbyz4KjrqQmINGbpJGDc0Lf1c/X6Rpbdt0myoQj7sOU1IMi9wD5yojt:HijOQmINGbpJGDc0Lf1c/qD0erI5BEt","tlshash":"295419597254343805c540a9906f094bf736292e246ac49cb36cf4efa8bdecd31beb79","first_seen":"2025-07-19T01:07:13.417114Z","last_seen":"2026-08-03T21:11:49.398195Z","times_seen":18321,"resource_available":true,"data":null}},"time_used":634,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/30731-19de50721de60a13.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/30731-19de50721de60a13.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aooxJ7VbuzLN7prpoz5xXC7B6o6B7XYwbhz1s6%2Fyo%2F%2FsMyM0gR6G7i%2BRUaCSNnZG%2BVgeFari%2F2u0iOaGXFr8dAjqNRHSNlp6KQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d038b1f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":910744,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0a6f403b4f59187fb0a165c9821ac3fc","sha1":"d6ce18fdade2a25f708897c701ff2f11c6b6937d","sha256":"6e6fb1f3038f822ca348ea62ee3c31370dc9532cb4c315a3d0724e3c2b473563","sha512":"64a67dfb42b4390435192862c524cfb6f5c0cbadafa3469a133def471589a44c01a5062ac61e337eff6570591bee8fb87d1b129e5a441f486604b7971830c312","ssdeep":"3072:9dHg+1uKewJ0Byiw1QRi8B6a3bmicWAM7c3jiPYFEcFBKKMhEmDwlQx:9dHxQRB0Dz7vMKmDwQx","tlshash":"a515b5985bb553fcf405f7f48a2ba4b43f6a38f67a42c4b8c3a91c15d4520ad89a5cc3","first_seen":"2025-10-16T04:05:32.777392Z","last_seen":"2025-11-16T01:25:44.554929Z","times_seen":431,"resource_available":true,"data":null}},"time_used":564,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":241,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/92148-f4aaff0397544571.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/92148-f4aaff0397544571.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O93bYRuBvXX71DFQ1kdROppfaIppNeHVka4FzescvQ%2FHF9c5NHEK%2BwE4%2BPI%2FQZBLYHYjFHzlZcpcZabWUICafMTvgMnCzOP9Dg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d03bb4656c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16657,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16657), with no line terminators","md5":"e5a9fd6c13384f417dca9b4c6a264114","sha1":"af973071192ef3c9c7303f8bf652433313df5cd1","sha256":"1c118c9909b4025458035a8429166655f856ff6fe8e876f8473c864fc8b7e395","sha512":"e718174294504f8b2477aa8d18a04c1b8a41fefc2edcc184ca7e165d05a8ec0ba1f5cf02ee1a047aec26d1552f21baf7c5353f9515444a157aac1db75d0d4c6e","ssdeep":"384:DLtQxW+19Vd6J4FU0Zs1Th/ndpRqgG4gjbI3/ovs2GK/sYp3wm7GjUWybgAKJ7d2:dQE+buJZ0y15dpRk4y+gt7/sml7GAFs+","tlshash":"3472d95da3e6a5e8f503e3f8835bd8353aa72df56912cc246bf56c25d50008cb8a5cc7","first_seen":"2025-10-16T04:05:32.855496Z","last_seen":"2025-11-16T01:25:44.551607Z","times_seen":426,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/app/(landing)/page-1dae2bc8e38d1d5c.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/app/(landing)/page-1dae2bc8e38d1d5c.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vCGCI%2FQvUzL10vqrug4pCM31I3%2FZVzu0bKDRDaTCHBeNVhJub08dVrmITjiKXYITHgSDD1JEeIEYUxIgPVq3YGSfWiIm9hbQTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d03db5856c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15017,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15017), with no line terminators","md5":"25cb6ffc60234b9712789e3e77a33be0","sha1":"1b76f31cd0843a2c68a9c6f241622df367356f51","sha256":"2e496566964d0bc53aaa32828394764034bea37702e6f54f2a42761336f1b9c5","sha512":"bfbc1856a96b0cc97f77dd285489e9060086f3b5bb9827cea479aa114ceff1b4492c58b8686e2a1ddad9a36845ec6793bf74b3a2edb78e01b9f3d20c9692f1b8","ssdeep":"384:+Saddq55XGydqhFoSObqu7zYOJV56wzchc:+Sqk5WWWoSObqQJV5ihc","tlshash":"cf62a881e254daacb45394adc32dd039326f25a5d65e8570f4fe9c3861094c8fb2bbac","first_seen":"2025-10-16T14:33:44.841388Z","last_seen":"2025-11-08T17:30:33.379602Z","times_seen":79,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/73943-a1da367143a13ac7.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/73943-a1da367143a13ac7.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JC3fZ9NM%2FIfdatZlrlg4HV2qxQSVG5iid9HaPA5E%2B4iO6APH5%2FHfBpoi6PTGOelXWaRcDCAwUj%2Fyc8WrUcPJBbIAPaPc7RfdtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d03db5c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41441,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41441), with no line terminators","md5":"e490c41ebf0e8e65f7d80bd12ad7df75","sha1":"b29bdb1b8eab7dd7ebee21f75abd74b12cbeeadc","sha256":"7b286340f4a6040af83fdb4a88fc934389877998f068ec85355d16f6d5041441","sha512":"7ffa1d698766b0d6e98fd0e9ebe2d6705e2865fe2991462d8404d326c6b27d30dd790c32f9ebbd8542d7089799c8b0dbe41b46b47d8f1b75abdf933cfaa13826","ssdeep":"768:Ssv1I3roaqNU6UECNOatsevuDexU4wt21csRm9M1+L0DW+XWZZuU4Os6salZPljB:EtP8Rl","tlshash":"8b13629c97b119cd7d885ae9bf0600bc373e92bab069882ded4d0d389045cd5fe1bb94","first_seen":"2025-10-16T04:05:32.786226Z","last_seen":"2025-11-16T01:25:44.556336Z","times_seen":431,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/app/global-error-84c26475654e8359.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/app/global-error-84c26475654e8359.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I9kHnD9hO3YkAatdd%2BYuURQKG317zyYCRr1VTaAS6gcqCguvcl%2BWuk4pKlayoaJCPsm3JL632jjoxmidrFdZ29AxH%2BmmlQcpvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d03db5e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"86a0c59c18713dec34f72247f6404b91","sha1":"98f942f10f3985863957d5d9cd2abb5b24db53a2","sha256":"8ad3f0d37edae87defbd4bd0b5ad2ea68249e18b9a2e234e47528e91b7dce82f","sha512":"5546453fe918ab9bce3efc59242685291314a053c461bebd4d77f0b37d17bfc60ebf3d4bb03a9e808934fa0a31d566362831059a26704f5ecb09cca33b9ca1e9","ssdeep":"","tlshash":"bed0ebc202407cac74160b6c00b0d830300800b77018c8dee323ae2008624e00381c0c","first_seen":"2025-10-16T04:05:32.905383Z","last_seen":"2025-12-04T17:28:23.099055Z","times_seen":502,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/global/twq.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /global/twq.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MBBU4JfLwjDf5xRtKrwA0h04VvubxG439gzHOBhRn3hmLNSB6kmct%2FDZRR%2BmaDKdHt2TJ0fxvTUg%2BT3qjJULSjgLAqk%2Br%2BJsug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d03db6256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308,"size_decoded":0,"mime_type":"application/javascript","magic":"CSV ASCII text","md5":"7f4d9e824f13f7d27acdc868f36f7208","sha1":"125a712d37aefe5d3e52ce2ae8986e109eb473de","sha256":"d6768cdba372d919e6d9322bf3cf3a0dfe427d86293aaf16f23d096028a00a1a","sha512":"d6395459961f34c3efc4c55ffa6bd873fbf20cf9aab17d31ec926d7ff645cfb9ae0cfea469b98e0604c5de162b60eb1bfc7b06a6fe91e3497f3a4fb32d29c20a","ssdeep":"","tlshash":"66e0e7f12d093d631fa11374117f931f3143210575595b91d59cd540376249f8037b8c","first_seen":"2025-03-19T10:41:28.935479Z","last_seen":"2026-08-04T00:23:10.730598Z","times_seen":26971,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/css/dc249df9fc15b505.css","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/css/dc249df9fc15b505.css HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2BBt%2BFEcBO8vjWhEpznXIcKXcQZO6reU8zKUIgzjQe8Nf1%2Bvgbo3aTi1DzlxzcNtA4dY8PgUGBHYwuU7cgygs93GSoR9zTUt%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d037af456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5766,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5766), with no line terminators","md5":"4668cc96d22d223dfc3649a6adb2777f","sha1":"bc7faf2d9f393a76055b11cce66f59051a748180","sha256":"1cfd3929771daae22e134c014b018c3be8d8e2214fdf310885417fbce13d0868","sha512":"fc3a9254255b9ba1b9983b349aa83f60ad10b85d5e735488127be25ce5d53f7dfb4c3d12431dbf049e620c06c4ec2ae0b00464d9285ebe7177270eb75d788b16","ssdeep":"96:SWJhs8lOuQmlyItK1Sr5qv0jmIeAhxsHrjtTRo:SWJhP3QmRtK1Sr1jmGhxorhTRo","tlshash":"e8c19a3bf3219072018b4f4d85e3ef69da2ed18297539ebba490080cf3ce9d11565e5b","first_seen":"2025-10-16T04:05:32.899281Z","last_seen":"2026-01-30T14:20:26.858295Z","times_seen":432,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/app/not-found-aa673beed1a0d17c.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/app/not-found-aa673beed1a0d17c.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vokIX0wt0%2B1fduRJo7YYh5TFVpVZ5K02bBAKABpNZ9n9qmWWwCxACvalapaEedhhLtWFPKakySLeGnAx3MD9Cs0UA9lVDFyFiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d038b2156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43090,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43090), with no line terminators","md5":"517473bc536db4dbebd6487563eca146","sha1":"f21faf08e40f6cb1b74eaefcb9a180061efdcce7","sha256":"91ae4e593344b4f4b340d0977cefb2001673eed4e835a776a3d75aea93080810","sha512":"bbf5c05af3847c109eb8063604e3e2c154b4b97c0bc5bc3a4e4fe574280deaf2098a4064faf5072600b35d20a60b824f11dddb5c36ad8aa61a969189c0b92a28","ssdeep":"768:oyPr4cLO1IlSlF62mJpMzlou2Q4rF4UpWzW1DnHbu1agQT27wtYRfH+hB64UUo10:fkif2aMaiR6HKf0x0XEdw/nje7/a9yOI","tlshash":"c61363ec5bb109cca98946eabb0614bc273e91bab068892ced0d1d386041cd5fe17fd5","first_seen":"2025-10-16T04:05:32.951614Z","last_seen":"2025-11-16T01:25:44.549575Z","times_seen":431,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/24464-a28857939df965be.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/24464-a28857939df965be.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6VmOgiQSDnickJbLBFP2x2aUCaoVq7%2FJV%2Bmyvt%2F15oxxuhzLgFQ%2F8TGJJyWHiRidpOjMUz7Ht7iQCLsjc2TvSi73PorQZxxgRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d03cb4e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2704987,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65481), with no line terminators","md5":"8808228e4e570f7bf5da81252ca4d80b","sha1":"e4a45394f880bbd21f30269030e7d1fd8b7bb331","sha256":"908dcadffd4879c666c96b4fc6b92222a45cc91e0e6f4a3be819d681a68a889c","sha512":"52ae288e157dd164a89f0798a739dd85f600b2a22dfb7472a130a4f982dad3b3e16bd8ebb82cc493982e8fd5e4c0c68094bdf930c9ac7e55981950387c3984b3","ssdeep":"12288:6Je2e02xEzaIGTBrfzLd91WJ24cvYkjZli4CnLPwGDkiqCCE+WTjjXHPxy0D8eUH:M/cpQlKxZNgvIh/VAK","tlshash":"c8259319ca6602fd7f586c81ca4774698ee282436fd789fcdaba7e1447b0adf0301e51","first_seen":"2025-10-16T14:33:44.870431Z","last_seen":"2025-11-16T01:25:44.565435Z","times_seen":418,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":302,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/api/mammoth/auth/check","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:02.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /api/mammoth/auth/check HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tefowex.com/\r\ncontent-type: application/json\r\nauthorization: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:03 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JeoPBuupKqWwVpoJvWirAT3FlgOwdp0jQg%2F%2FfScCFnj9IKBhWyM0l08qQoFNsb9944uGd%2BwaUxNpPaegI%2Be1Pq81y2OC3M5pQA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d0a8a0256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"aced0d4c1bf7b416bd8757e86c69b12e","sha1":"242609e9dc75daa64e55af8d8254cdc02722ee92","sha256":"831690950d50aa783757553ff7dce0e549b2bf0c29fcc850ee8ef7a7f6bb54fa","sha512":"8c854561d71566fbd9d1e18c91f1bd391cbedf2b2e8b52d84205d4f773f36b14bfd5d3ca2cba9f5a300b8d96b025ab3eee5d5e3a19985e78386e04584e24d0b3","ssdeep":"","tlshash":"8d80040115000173f4001144113c1d115c54533745410014fc7cd0c4c7530d53043c17","first_seen":"2025-09-13T11:18:32.558363Z","last_seen":"2026-08-03T21:11:49.427836Z","times_seen":18822,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/greenColorDSGN/mix/landing/cubes.svg","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:03.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /greenColorDSGN/mix/landing/cubes.svg HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:03 GMT\r\ncontent-type: image/svg+xml; charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:03 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2CyX81Moxqgmsz54UaBWcR7hpPsMbHWY46G%2BxbvmNBbQV8T0L3mP7jSt6tRJTdfoLWKiiEo0xhzaOaP3YYivI%2F0SgDL9umQRqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 997e1d0c0b6456c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29103,"size_decoded":0,"mime_type":"image/svg+xml; charset=UTF-8","magic":"SVG Scalable Vector Graphics image","md5":"4e90b2b22530676fb1ab9a83568b1c5c","sha1":"ab5f0809b72c72e4c1955e814a07c7f3b325abeb","sha256":"f317f754674b8b491d490221e7266d336ba31826edd9f4170041698e82c5646e","sha512":"784ad84793d0cbe84c7bc894d003616181426d65605ef3034fa7e33935bf4d47e4b693d4abe8a897c1e991fc669519ae9b5108a9ff52f8dc32e30fce37f025ad","ssdeep":"192:do2EvwnuGMhPP4cLxOcQdvp5ivX1rF6r2QSQSa4Z6h7W:KDYuGiPdxOXdvmNFFQO","tlshash":"cad239a599eaaa32f32cc2d9de4494243e1641d3dec6c161b19d2f6fbf31dc1490f2a4","first_seen":"2025-09-13T11:18:32.403286Z","last_seen":"2026-07-18T13:16:44.268017Z","times_seen":3818,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-01T20:24:01.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:01 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aIJDeOzrUEwB37na%2FUxcwrugsX47XxjXoOvpdyurZv0UIju5Bm6eJxWuXLIkpYH8JYNPswBHJNE23C80d5zZ17OmUUdsdaZCBzV5\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 997e1d016e9c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13396,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (13396), with no line terminators","md5":"587f355d97bcbdb5e08898ad432cadc5","sha1":"ee0ae2957abbeff88683b1f6046f60fb34c4fc9e","sha256":"82c478bf39ee8d7f1d2f9b202e63222c030151a32cea5e95cda3e8d5e397280d","sha512":"3580a4f3c7cd02d673b9a76965081befb830d559bf13b155ae6114e6ebf5dddad25b7a633bdccc4819e8ebb70524f03d023f451fdedb91a8bb0a7a158bc3b346","ssdeep":"192:a5BXBvBEUOW21RW6EhnvefSpGB913MCzqg6bHEbCJ6bg69NoyN/f:a7RJVOWgRWLvuybHEbC0bg6PN/f","tlshash":"8d52211bac05dd069c37ed5d013e9e3a50cdcd378a38d9b8a28dce5d0752aba1bd9c81","first_seen":"2025-11-01T20:24:34.133395Z","last_seen":"2025-11-01T20:24:34.133395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":50,"dns":30,"connect":1,"send":0,"wait":137,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/_next/static/chunks/49080-2901843180fabd12.js","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:01.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /_next/static/chunks/49080-2901843180fabd12.js HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WUuB8PUlIjlYgZ2U0dIB69r8LlHwCmb5QZ2aC88PkwVwRjh3CnfClLkHFTuDcAtAMIajRQHdlChLDuyzquf%2FF0W502vCZHfY3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d037b1256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15261,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15261), with no line terminators","md5":"69b80d969aaad07036978bda468796f5","sha1":"e06516d12bff2faa89329f83289d27d4ac369917","sha256":"5f09712195529d437bc348578aca6c679da21c9bab03b7d1012f70a672a5e017","sha512":"bb02ebc1b0fecb6ec0cde686fa78655706bf3f50939f8e7b52347e7aa9811af62fd5e477fda50bd35febb5fab3c591e88fdcac416da22b22d3c1b90f3d9220d6","ssdeep":"384:OQLgSjUuqTsJIMnocJPYVrBNfF17KGYJy/t3F:mSjUsIXcuzcpy/tV","tlshash":"a96209a0b580bd360367499180ff4706b335593a5c1f9498b7b8ccd562b4ece41eaf8e","first_seen":"2025-10-16T04:05:32.818988Z","last_seen":"2026-05-26T05:03:28.592629Z","times_seen":6852,"resource_available":true,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tefowex.com/global/fonts/proxima_nova/stylesheet.css","fqdn":"tefowex.com","domain":"tefowex.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tefowex.com/","date":"2025-11-01T20:24:02.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tefowex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Sep 2025 22:22:11 GMT","end":"Sun, 28 Dec 2025 23:16:54 GMT"},"fingerprint":{"sha1":"03:A8:D8:C7:ED:59:15:70:50:4E:7D:FD:03:1F:60:13:6A:B3:F7:FD","sha256":"F1:BA:EF:CA:C8:00:74:66:81:04:70:E9:2B:49:C6:AB:59:2D:68:B8:62:AD:79:37:11:C2:6A:A9:B1:E9:B5:6B"}}},"request":{"raw":"GET /global/fonts/proxima_nova/stylesheet.css HTTP/1.1\r\nHost: tefowex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tefowex.com/_next/static/css/dc249df9fc15b505.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 01 Nov 2025 20:24:02 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nvary: Origin, accept-encoding\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 01 Nov 2025 20:24:02 GMT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3NNu1nIEkx%2BlxgEDjwYCfaLTd6rCowzK6MbYbpNa%2BpoxMRvcqej3z3g1uaKAFYd1YALW6pxAihPdi5KfUbALEugiWfpDo6iYCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e1d052cd156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16610,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"673fa97a88bfa20fe973f673a53b3eb3","sha1":"76e3dba5dcfc59e2743f9e311f00af3713558911","sha256":"c95004c3ccd349ab98e3399fc906b32ff9175ada6c1f8c96eaa33e2f11cd1a6d","sha512":"c50ee40dd523a9d412e32e2fd7dead904f4db96155ccdf0966b597f4c5b58040616fbe64f27a5a525761d3221bfd8a8a77e7512e793991ccd6ba803c8f966aa4","ssdeep":"192:Yz6b6dlmqgqYGVNCGAcCh2H5vwCGmhRgSem0pBjqkCY9WTpnOPx/OSW9r0tZxjyL:0aG7KUC4ZYCrz2muZHCfWctAH/uNB22","tlshash":"e0724942cccdbc624aa6148077fe6ff60b4e28559079ad57ff3c38389d115adc68472a","first_seen":"2025-06-28T14:48:13.079962Z","last_seen":"2026-08-01T20:05:38.591889Z","times_seen":6976,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"tefowex.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}