{"report_id":"b0cee997-5cca-4800-9655-39ac9408aa7b","version":0,"status":"done","tags":[],"date":"2026-07-12T21:40:47Z","url":{"schema":"https","addr":"tgyadagat.xyz/","fqdn":"tgyadagat.xyz","domain":"tgyadagat.xyz","tld":"xyz"},"ip":{"addr":"2.27.5.201","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"tgyadagat.xyz/reels","fqdn":"tgyadagat.xyz","domain":"tgyadagat.xyz","tld":"xyz"},"title":"front_reels","dom":{"size":1156,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (592)","md5":"bc1310936b85210d0ad017ef7121a493","sha1":"38b089c241d085ef612da3e08aa8a42e586a5582","sha256":"7cbdab2e11023a198a861d740a479305cf360ea430587b935185af7268f7e36e","sha512":"103886129ed0dd3a71566ec48e6aa77cf085fcf98c56921a8a6679d991bcdba60307cc60289afd5680e0767e6b2544bbebdbfcc228fcb849064ac6354d04ed57","ssdeep":"","tlshash":"5d2141561ae2546f73332bf26992bb486889c60bc60bdd18f6e9609967c1e940c8653c","dom_hash":"domhashf0e8b8c5159e1114e24401dfaa6510b7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"tgyadagat.xyz/","fqdn":"tgyadagat.xyz","domain":"tgyadagat.xyz","tld":"xyz"},"ip":{"addr":"2.27.5.201","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T21:40:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"api.tgyadagat.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tgyadagat.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.tgyadagat.xyz","ip":{"addr":"2.27.5.201","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-07-05","domain_rank":0,"first_seen":"2026-07-12T21:40:49.105667Z","last_seen":"2026-07-12T21:40:49.105667Z","alert_count":1,"request_count":1,"received_data":1900,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"tgyadagat.xyz","ip":{"addr":"2.27.5.201","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-07-05","domain_rank":0,"first_seen":"2026-07-10T10:09:20.381907Z","last_seen":"2026-07-10T10:09:20.381907Z","alert_count":5,"request_count":5,"received_data":2075137,"sent_data":2400,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-07-09T02:04:55.259999Z","alert_count":0,"request_count":1,"received_data":116672,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tgyadagat.xyz/assets/index-BpN9QdL0.js","fqdn":"tgyadagat.xyz","domain":"tgyadagat.xyz","tld":"xyz"},"ip":{"addr":"2.27.5.201","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"4bd1ce603952f83b8bf835ec2dd4b10f","sha1":"b7be90608bfc0aa787ee96f66c7732a65578160c","sha256":"1854cac8ae42dd87eb147ae8bbe0f04cdd98162e3be2f0a9ae8b48b2d051d65c","sha512":"2a850f8164ba45f394d399868dbf86eeffd9df1b0f30517367491419343210f2514a331c297d05f4b18bd93a7c50b10477386fdf7b5d13f6792ea8a934a8eefb","ssdeep":"6144:PGBRxNA6W2d3gGLo+OiXx2CV00nPnZovimxjoL2EjV/XRlz+XtlL70KxZHE1/8k:u8xcXxiroF7+dlZZHC","tlshash":"03b46ee93291b1625bd742b2406f0606b33a5852680d442cb278fddf39b184966fbffd","size":541992,"data":"","first_seen":"2026-07-12T21:40:51.344576Z","last_seen":"2026-07-12T21:40:51.344576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116341,"data":"","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-07-16T05:08:27.985486Z","times_seen":2705,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher17.process7//obj20 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher17.process7//obj21 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"api.tgyadagat.xyz/user/672818350","fqdn":"api.tgyadagat.xyz","domain":"tgyadagat.xyz","tld":"xyz"},"ip":{"addr":"2.27.5.201","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tgyadagat.xyz/","date":"2026-07-12T21:40:21.379Z","timestamp":1783892421379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.tgyadagat.xyz","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 12:43:34 GMT","end":"Sat, 03 Oct 2026 12:43:33 GMT"},"fingerprint":{"sha1":"9A:32:04:A0:75:90:B7:3A:03:A4:12:35:AF:03:54:4A:B1:EC:38:3A","sha256":"44:CE:7E:FA:4E:42:53:1E:91:A9:00:23:01:DD:6B:3C:6D:24:EB:AD:F0:7F:0A:0A:25:8E:E4:5D:CF:05:A8:F4"}}},"request":{"raw":"GET /user/672818350 HTTP/1.1\r\nHost: api.tgyadagat.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tgyadagat.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tgyadagat.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://tgyadagat.xyz\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 21:40:21 GMT\r\netag: W/\"613-ckIjOHMls32GxatvMXRa6NQIOlM\"\r\nvary: Origin\r\nx-powered-by: Express\r\ncontent-length: 1555\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1555,"size_decoded":1900,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0f812f53788b40438c341b8001a95a0d","sha1":"724223387325b37d86c5ab6f31745ae8d4083a53","sha256":"6f825481361a3f0f31add82b9ada0dc7dcad4d5c477c0e11320af74c136f1f59","sha512":"0d434ddca34facf17beba9ce4a398b7a2b857c06dd16817487f32043dfec4924d338bdb0e1fa5d577eec5632ed190ee4dc8da275e5010224aed5d96f62d147ba","ssdeep":"","tlshash":"3231fe68c7364870d29124879a967f495ccef663c78a5cdcfd4c1711ea1087318078b3","first_seen":"2026-07-12T21:40:51.340851Z","last_seen":"2026-07-12T21:40:51.340851Z","times_seen":1,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":0,"dns":224,"connect":32,"send":0,"wait":40,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"api.tgyadagat.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tgyadagat.xyz/assets/333-CQBhZMfe.png","fqdn":"tgyadagat.xyz","domain":"tgyadagat.xyz","tld":"xyz"},"ip":{"addr":"2.27.5.201","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tgyadagat.xyz/","date":"2026-07-12T21:40:21.752Z","timestamp":1783892421752,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tgyadagat.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:50:12 GMT","end":"Sat, 03 Oct 2026 15:50:11 GMT"},"fingerprint":{"sha1":"8F:37:7F:A8:50:D1:3A:CD:88:FE:00:BF:D1:A9:3F:52:3C:DC:5E:DC","sha256":"01:C7:D7:61:C5:DF:4C:99:3A:41:1E:34:6B:59:D2:B9:63:A0:9D:31:BB:AF:31:B2:D3:53:87:1C:43:75:41:A1"}}},"request":{"raw":"GET /assets/333-CQBhZMfe.png HTTP/1.1\r\nHost: tgyadagat.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tgyadagat.xyz/reels\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\netag: \"6a53c7eb-16dea6\"\r\ncontent-length: 1498790\r\nlast-modified: Sun, 12 Jul 2026 16:59:23 GMT\r\nexpires: Mon, 12 Jul 2027 21:40:21 GMT\r\ncontent-type: image/png\r\nserver: nginx/1.31.2\r\ndate: Sun, 12 Jul 2026 21:40:21 GMT\r\ncache-control: max-age=31536000, public, immutable\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1498790,"size_decoded":1499099,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"cd10f34c67c0cad07a5f069051b1d142","sha1":"a5ab276c3034413407e11be7238ac98009dc2fd4","sha256":"9d714ab3ac168e09557fdb8e3a1f8b04237467e0f061fc2f805ce909f447ebc7","sha512":"f2eedd8ec8cc9db8b46ecc11257f6b4d339af7a779c40e3fca469d6518c16f1b33fa04eb6ce150cea81d1e0c4482de1e40e02aa1fde3cd234cd4602c7caec4af","ssdeep":"24576:03DD7eRnNvZm4PhRek1+899vkFB6hSkriloq:+e/hmYZdFk2riL","tlshash":"aa2533e53ac130dfddcc1e3e93da8dda078649037e85bc5570cb92833c0689d5a679aa","first_seen":"2026-07-12T21:40:51.341868Z","last_seen":"2026-07-12T21:40:51.341868Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tgyadagat.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tgyadagat.xyz/","fqdn":"tgyadagat.xyz","domain":"tgyadagat.xyz","tld":"xyz"},"ip":{"addr":"2.27.5.201","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:40:19.879Z","timestamp":1783892419879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tgyadagat.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:50:12 GMT","end":"Sat, 03 Oct 2026 15:50:11 GMT"},"fingerprint":{"sha1":"8F:37:7F:A8:50:D1:3A:CD:88:FE:00:BF:D1:A9:3F:52:3C:DC:5E:DC","sha256":"01:C7:D7:61:C5:DF:4C:99:3A:41:1E:34:6B:59:D2:B9:63:A0:9D:31:BB:AF:31:B2:D3:53:87:1C:43:75:41:A1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tgyadagat.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/html\r\ndate: Sun, 12 Jul 2026 21:40:20 GMT\r\netag: \"6a53c7eb-215\"\r\nlast-modified: Sun, 12 Jul 2026 16:59:23 GMT\r\nserver: nginx/1.31.2\r\ncontent-length: 533\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":533,"size_decoded":795,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"6c4a170d481fc0cb3e2f2d8d3a666540","sha1":"9d493e7c4edbaec448244ea55cc3f0390a36f4ee","sha256":"bd9fc649e748b306a10f53460b926bb095b97ccb83f893059af6573272e4c08e","sha512":"bdf97efb0ccad04bdd38e13cafae82b6a03aa6d1ea5f791a6d431f93aeba8f00bb580dfa687a42a76b77eed7f812fca4cd850983865c848cb1bc59cae39cfad1","ssdeep":"","tlshash":"5af0200689a0c90523200b640ec0f40ca947e28ba348ad0861ea603d9f80bc5cdcf478","first_seen":"2026-07-12T21:40:51.342825Z","last_seen":"2026-07-12T21:40:51.342825Z","times_seen":1,"resource_available":true,"data":null}},"time_used":737,"timings":{"blocked":-1,"dns":578,"connect":37,"send":0,"wait":37,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tgyadagat.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tgyadagat.xyz/","date":"2026-07-12T21:40:21.103Z","timestamp":1783892421103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tgyadagat.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 12 Jul 2026 21:40:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 05 Apr 2026 10:29:48 GMT\r\netag: W/\"69d2399c-1c675\"\r\nexpires: Thu, 16 Jul 2026 21:40:21 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116341,"size_decoded":24021,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-07-16T05:08:27.985486Z","times_seen":2705,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":2,"connect":23,"send":0,"wait":22,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tgyadagat.xyz/assets/index-BpN9QdL0.js","fqdn":"tgyadagat.xyz","domain":"tgyadagat.xyz","tld":"xyz"},"ip":{"addr":"2.27.5.201","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tgyadagat.xyz/","date":"2026-07-12T21:40:21.106Z","timestamp":1783892421106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tgyadagat.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:50:12 GMT","end":"Sat, 03 Oct 2026 15:50:11 GMT"},"fingerprint":{"sha1":"8F:37:7F:A8:50:D1:3A:CD:88:FE:00:BF:D1:A9:3F:52:3C:DC:5E:DC","sha256":"01:C7:D7:61:C5:DF:4C:99:3A:41:1E:34:6B:59:D2:B9:63:A0:9D:31:BB:AF:31:B2:D3:53:87:1C:43:75:41:A1"}}},"request":{"raw":"GET /assets/index-BpN9QdL0.js HTTP/1.1\r\nHost: tgyadagat.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tgyadagat.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\ndate: Sun, 12 Jul 2026 21:40:21 GMT\r\nlast-modified: Sun, 12 Jul 2026 16:59:23 GMT\r\ncontent-encoding: gzip\r\nserver: nginx/1.31.2\r\netag: W/\"6a53c7eb-84528\"\r\nexpires: Mon, 12 Jul 2027 21:40:21 GMT\r\ncache-control: max-age=31536000, public, immutable\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":541992,"size_decoded":173122,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43128)","md5":"4bd1ce603952f83b8bf835ec2dd4b10f","sha1":"b7be90608bfc0aa787ee96f66c7732a65578160c","sha256":"1854cac8ae42dd87eb147ae8bbe0f04cdd98162e3be2f0a9ae8b48b2d051d65c","sha512":"2a850f8164ba45f394d399868dbf86eeffd9df1b0f30517367491419343210f2514a331c297d05f4b18bd93a7c50b10477386fdf7b5d13f6792ea8a934a8eefb","ssdeep":"6144:PGBRxNA6W2d3gGLo+OiXx2CV00nPnZovimxjoL2EjV/XRlz+XtlL70KxZHE1/8k:u8xcXxiroF7+dlZZHC","tlshash":"03b46ee93291b1625bd742b2406f0606b33a5852680d442cb278fddf39b184966fbffd","first_seen":"2026-07-12T21:40:51.344576Z","last_seen":"2026-07-12T21:40:51.344576Z","times_seen":1,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tgyadagat.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tgyadagat.xyz/assets/index-UZTsJuTi.css","fqdn":"tgyadagat.xyz","domain":"tgyadagat.xyz","tld":"xyz"},"ip":{"addr":"2.27.5.201","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tgyadagat.xyz/","date":"2026-07-12T21:40:21.107Z","timestamp":1783892421107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tgyadagat.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:50:12 GMT","end":"Sat, 03 Oct 2026 15:50:11 GMT"},"fingerprint":{"sha1":"8F:37:7F:A8:50:D1:3A:CD:88:FE:00:BF:D1:A9:3F:52:3C:DC:5E:DC","sha256":"01:C7:D7:61:C5:DF:4C:99:3A:41:1E:34:6B:59:D2:B9:63:A0:9D:31:BB:AF:31:B2:D3:53:87:1C:43:75:41:A1"}}},"request":{"raw":"GET /assets/index-UZTsJuTi.css HTTP/1.1\r\nHost: tgyadagat.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tgyadagat.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: nginx/1.31.2\r\ndate: Sun, 12 Jul 2026 21:40:21 GMT\r\nlast-modified: Sun, 12 Jul 2026 16:59:23 GMT\r\ncache-control: max-age=31536000, public, immutable\r\nvary: Accept-Encoding\r\ncontent-type: text/css\r\netag: W/\"6a53c7eb-5901\"\r\nexpires: Mon, 12 Jul 2027 21:40:21 GMT\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22785,"size_decoded":5257,"mime_type":"text/css","magic":"ASCII text, with very long lines (22784)","md5":"91005bd88681878d93d2fa9ed2790d74","sha1":"a95928bd7f9a16dfb2b5473569111bf4a5a2679e","sha256":"56db2fca15fe5afffeaadb1f2313eda2225a608efc1dd5ae5de1992557115860","sha512":"5f70cf9e3c9e4b3f25fb6f22ff6c9dfec48cc977b17efd82c24ce0bd6b3e5f2a9039b194fc53de02ef7cb4619e64354cb919418504ccd8bac191b11489c53730","ssdeep":"384:GZt/hlTCfYT3X4d1iBI8TL/M/w/e/HcrH9u:GX/hlTY7hcrH9u","tlshash":"9ea24219a645403bbd53a0f5d69cba9df41bb0c6df3a67faadc25100a7e23f61c93600","first_seen":"2026-07-12T21:40:51.345698Z","last_seen":"2026-07-12T21:40:51.345698Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tgyadagat.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tgyadagat.xyz/favicon.svg","fqdn":"tgyadagat.xyz","domain":"tgyadagat.xyz","tld":"xyz"},"ip":{"addr":"2.27.5.201","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tgyadagat.xyz/","date":"2026-07-12T21:40:21.366Z","timestamp":1783892421366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tgyadagat.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:50:12 GMT","end":"Sat, 03 Oct 2026 15:50:11 GMT"},"fingerprint":{"sha1":"8F:37:7F:A8:50:D1:3A:CD:88:FE:00:BF:D1:A9:3F:52:3C:DC:5E:DC","sha256":"01:C7:D7:61:C5:DF:4C:99:3A:41:1E:34:6B:59:D2:B9:63:A0:9D:31:BB:AF:31:B2:D3:53:87:1C:43:75:41:A1"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: tgyadagat.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tgyadagat.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nserver: nginx/1.31.2\r\nvary: Accept-Encoding\r\nexpires: Mon, 12 Jul 2027 21:40:21 GMT\r\ncache-control: max-age=31536000, public, immutable\r\ndate: Sun, 12 Jul 2026 21:40:21 GMT\r\netag: W/\"6a53c7eb-2532\"\r\ncontent-encoding: gzip\r\nlast-modified: Sun, 12 Jul 2026 16:59:23 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9522,"size_decoded":1817,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7e840862161341271697daa99a40d76b","sha1":"3f5bb8f3a6a05b7ca68a62581d2dd5bc88812caf","sha256":"61bc9a161de58248288e6905425d7180f0624c2865007b97d763fdac12043a66","sha512":"695cf2d7a2ad9fd7618cfac28e4d356f000eaa9069484ad34a68afa456e12c6943f3e66a0ab35902b5221d912c45b79e179e371f7a4097c2e149b7a5fffeed9b","ssdeep":"96:8Ep9/pIZ6gzAZp9fD6ZQEIOKMXGQSQzsw+JignGFGxQGySLISTSoSWSSESiSeSEs:qII+6DImQnMStOcbloxW1","tlshash":"901253a2e6f9b46d62150174fbd394d7102f90c9ca11078fb4be3231512baa3f9bd5b8","first_seen":"2026-03-15T03:33:01.165262Z","last_seen":"2026-07-16T20:25:42.724308Z","times_seen":7872,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tgyadagat.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}