{"report_id":"e1db8941-9584-434e-9cad-2f449469c99b","version":6,"status":"done","tags":[],"date":"2025-12-01T03:28:21Z","url":{"schema":"https","addr":"tjgp6tas.top/","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":0,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"tjgp6tas.top/","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"title":"WhatsApp","dom":{"size":236245,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28931)","md5":"f85c79932f6e41a54f92c448b49a4ffd","sha1":"9db4419fe568a5b25674db5c9e099cc83c59994b","sha256":"d62c57f306f0c385f5da8697fd8bb4cbf412b8cdf12a64ea9fd5fd50d84cbb3c","sha512":"45809681125bb8954d89a5e01094d8d39df98e42872ea85afe4a4320d266c2071a2e8f4fd32e98fce0de176514a292c101fe3bb47124ca56e0127cc46eeb738c","ssdeep":"3072:5bfy76VxTxKj6DwsTV0+rRPWY7pkY39Cyl4J:9xTHDW+rRPWY7pkM4J","tlshash":"c234953052f121778593e3a1be268a1f7ba1a557de1b46053bec4bc08f83e96ce6744c","dom_hash":"domhash0bd16fdcec6d87c1d7034c3f1ec7c49f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"tjgp6tas.top/","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":0,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-05T03:28:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-01","alert":"Phishing - WhatsApp","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-01","alert":"Phishing Block","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-01","alert":"Phishing - WhatsApp","trigger":"tjgp6tas.top/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com","meta":null}],"urlquery":null},"summary":[{"fqdn":"api-gateway.umami.dev","ip":{"addr":"172.67.171.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-11","domain_rank":261649,"first_seen":"2024-04-27T09:44:52Z","last_seen":"2025-11-25T03:27:38.790434Z","alert_count":0,"request_count":2,"received_data":2478,"sent_data":1023,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pro.ip-api.com","ip":{"addr":"51.77.64.70","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-24","domain_rank":40593,"first_seen":"2015-04-06T16:13:16Z","last_seen":"2025-11-24T20:57:38.094464Z","alert_count":0,"request_count":1,"received_data":220,"sent_data":486,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cloud.umami.is","ip":{"addr":"104.26.1.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-07-18","domain_rank":524054,"first_seen":"2022-11-15T19:45:49Z","last_seen":"2025-11-28T17:57:35.766813Z","alert_count":0,"request_count":1,"received_data":4061,"sent_data":409,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tjgp6tas.top","ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-11-24","domain_rank":0,"first_seen":"2025-12-01T03:28:21.86422Z","last_seen":"2025-12-01T03:28:21.86422Z","alert_count":126,"request_count":18,"received_data":1648929,"sent_data":7985,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Socket.io","description":"","website":"https://socket.io","common_platform_enumeration":"","icon":"Socket.io.svg","categories":["JavaScript frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"libphonenumber","description":"libphonenumber is a JavaScript library for parsing, formatting, and validating international phone numbers.","website":"https://github.com/google/libphonenumber","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cloud.umami.is/script.js","fqdn":"cloud.umami.is","domain":"umami.is","tld":"is"},"ip":{"addr":"104.26.1.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"469154509c4b055d8d9432e408e12c7f","sha1":"2ba57a6cb729b669f4c9bcf0225f758f30514ffe","sha256":"8597111111776a4b0498f5c6372fbe2ccc7db96f8e2c155806265c85e0b876ed","sha512":"92f002a52d314d79aecc960479777d280229d5daa762c80d63dd0d5bee86706a17352999c8dc12d93d6a1c00dbe1eeee69ef20210c5963ade708335577d9b75e","ssdeep":"","tlshash":"8951e8f672c4b0f17f7a34d0d1b96224b9261a71783b4081b6fe4c979b1e40ba130e69","size":2657,"data":"","first_seen":"2025-11-15T06:15:41.447851Z","last_seen":"2025-12-04T04:41:05.775718Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"04cccddc4c3a18d8ffe49d84b0d28b54","sha1":"c2a097ad28d763cc1182f7371363dd141b39cbee","sha256":"810f3b948db119c7b888d3b45365719512c270ac6faf8e3d9a44a7b8a4aab2eb","sha512":"5ca1737912b06cb4a5058002276f47bd266c496238631ab26140063d187c15409accd74592ccdc44b525841e724450f95330954c50c7496e49db2c1e81213aff","ssdeep":"","tlshash":"2df0a39d3c56b45737f93534c3238f6f3756170175839524d646cc2468545861846d4d","size":444,"data":"","first_seen":"2025-11-24T12:48:58.679943Z","last_seen":"2025-12-18T06:43:52.613627Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2ca07dd382e55abba03126efbc8b9b7","sha1":"48fdc20a627e25e3a8753f19b41007d3eba35308","sha256":"7f9cf77f6f868b8a3ded8a1a8b34e6c90928a1a558c3c4f9ba95d4083374c4b4","sha512":"e906926f69811e4100df8e881630fb900b662b516538edabca76d3aa5c8e9ecd4721250552a8be5704635596f4f7e96acf4708cf3081b8407bd9dcca71bf5be4","ssdeep":"","tlshash":"d051619c2f4142562e665aafbb3bf21ae27ac46be6508c04c134d7917884f4eefc4834","size":3082,"data":"","first_seen":"2025-11-24T12:48:58.681658Z","last_seen":"2025-12-18T06:43:52.614537Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/js/libphonenumber-js.min.js","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"77286f8062a4e7301e1707652321fb0f","sha1":"271acd6fee6b3cee7c600871d4f7bc8d7256bf41","sha256":"dd2c4f3eac466531562ff71a954d7c2e15a5813d77ef38f93ba4ab3d3d8a3848","sha512":"c92d001e4492d3d5421f6c2a34b0efeea67b45a41084bd8e7c26de4e04ecd8f4ab48f8572a6ed0bf07b723587f70242d834125b221c8db2b18bcd2577e0487a9","ssdeep":"1536:TOe0tNo455wjffgIKKDyXG1ojrxmHMN45Y7qWRD6KHKQMWNRVHhK+/1hFddNzTmz:TOe03o4Pwj1qxYMb+/0zhKyHvDq6N1lQ","tlshash":"ba04c9f77540bb7774b13b188e1ad24fab9c9c51dc98a08cdbe3d8da5d6182220bdb14","size":176102,"data":"","first_seen":"2024-08-19T21:23:26.913691Z","last_seen":"2026-07-21T06:13:16.821811Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"e38ed238e3c3cffcc1c55828aac762b7","sha1":"2a074577d3718f4ecb8ce9564603650818af886f","sha256":"926d7ab1e5d7cdf8b6d1ca8a730057387b6d697e3a6eec75fd5e04b3f05bc82e","sha512":"92e7be0942d1e87717a4a92bbae02a1147ba3fa322723b1893622cd2fce728af15cf1627c5f500bcf9e9b12bfa23d6bc9c17e1aba65e20a56be71d77439bcb26","ssdeep":"","tlshash":"d931124829b361847df3b0b94f9f9704602dd617290cc954f91ea3109f91a1a47979db","size":1633,"data":"","first_seen":"2025-11-24T12:48:58.683341Z","last_seen":"2025-12-18T06:43:52.615612Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/js/countrys.js","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"f39a0de7ea7452207e3f0289457de645","sha1":"88d5717a3664756849574d63f1bc3d3023e05e90","sha256":"1867e689e335512910cd9dc2f627cbc6097592ed92b8904b2d3c0a7391066417","sha512":"1fabb5125ff85a4f601f9ba9f65c3f468389d55ae48b2d8138f05f2116c74fde1315ca4ce47919a52f7a959a2824e4805dc9de26da920dc7fb6baaf22bb2aa2e","ssdeep":"6144:54tc4Hl4qI4jf4iKPGNLSYj7I/cDxEC4vCjJOWT2E48DJhNbM3:m/1XB1tVnq+Cpw0c2sDPNY3","tlshash":"2e84205e907290919169547a597a3780f2291ee70ee879bb3f5ccb823f1c21fa73076c","size":400306,"data":"","first_seen":"2025-11-24T12:48:58.659872Z","last_seen":"2025-12-18T06:43:52.618384Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/js/lang.js","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"405f0c437c34d7dab6bac936f1944e86","sha1":"df18172df67f9751d35f65ac190eaa5b03b2d94d","sha256":"8f1cd983ba62b64e6cca9a87920f097a0ba5da6f733a89a2e8d5adfede7cd2d7","sha512":"d581756db18ea45c787b628be206d4dc1a85c221cbf28c1131636e22777c8bc95bf905ccf4423ca8ef3c69afdb360a3d99e9f24ac6a5e1241f4ad0e2ca30e815","ssdeep":"768:JkQVFMVIVVR3gfzqyV96DPXv3/p5qHf8yL0Ak1NXcAy1nIXXXJ96XhQ+b:JvVFMVIVVR3gfz5VWXv/p5qHfh0Ak1NW","tlshash":"d7f29751935662730553c29528051a3aa9430a37ce65b9227f6e63802f6ef3fbfb316c","size":34762,"data":"","first_seen":"2025-11-24T12:48:58.688805Z","last_seen":"2025-12-18T06:43:52.61127Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/js/socket.io.js","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"e58246b00ec1a9b307d4fd2a8b68afd6","sha1":"21ab9f9e0a1c683f51c1f0cbca3b6baa074b2ec2","sha256":"238040837b5172381b31d5721c7ff8993bdb761be29547b503e3a9b4e14c0f13","sha512":"f011f11c32ec387c7e7e522b4340eb65c79aecc907a9153919b4c799b7733119c06a8088919f7b3ea65c5c990a65c90c321a9fa1e68913e0cd515bb2a10b0edd","ssdeep":"3072:GLTygHMCO2KsFpWw0axSNZiXym7dSBg18FEEaLH32emV/8fkmh0KbhEGtkSWq:GLTyTX1sFpWw0ayBgaEEaLH32emV/ak0","tlshash":"81e35f49aaf72151917330398bafa045f239d01b220ace443d1cd7f49f65b3897a6fe9","size":154232,"data":"","first_seen":"2024-12-14T23:53:09.636549Z","last_seen":"2026-07-21T12:16:30.5129Z","times_seen":603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"74be0e0e14b3806e6ae42bcc1adbc69c","sha1":"29bda5dc5ee011e9d28a91a5d1ac5762448b26d7","sha256":"48d1bd09426cec575076b5e82e49faa8d5026dfd87cdf7bb37bde3f668e678be","sha512":"8163666812b12f2da97f7c9ce174dab1450b0ca967026f69da2d75b214a316f1bed0052372d95f5bf7b80f5849c3746190dfef47424ae8c6f1bd84621762bdad","ssdeep":"768:fRuYfR4FxC4TKOFoFdGSo4mDL8V5EhYz//:QYfmJTxK2SoPbs3","tlshash":"2dd2851973e5773c925bf0609d8f8c49f37ca968238e944a9a0c9491a8b5d78c37dcec","size":28933,"data":"","first_seen":"2025-07-01T16:42:08.881136Z","last_seen":"2025-12-18T06:43:52.616862Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"0383f122e0c766841874de502355d8b1","sha1":"22f6917682f853ba500e52d6c6f0084378b4d798","sha256":"ef7e3306afaf79aab6898b4c4cba1a7f4ef39937ab0aee944a986118dc936d18","sha512":"efb8c059ea43db443b1ea0c1f462048178c213a6a18efefac66627b828dfcd41dde3249efa7759596c48663725095d9f573af09842527503691d6dbd71b2e22d","ssdeep":"","tlshash":"4551dd5d12360974de3352bfb2a683cf9160010f7c518d1eb6bd8b882f9057297a2bdb","size":2600,"data":"","first_seen":"2025-11-24T12:48:58.685816Z","last_seen":"2025-12-18T06:43:52.617391Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca07bed7abeff36b8a2e6cbcf7282426","sha1":"2e15a10c71898cddc3f61c6806f2eb701e9729af","sha256":"653de701c56740560b33b741b57ed7a214ef049d709b64e549a3efbe65a19a1f","sha512":"766e0409064fe18128ed70304d60b8174417a4587ba4ffc6ce37d9c99af7c43ff2c39aa9d98fb1110954f213fb41ce6c3396fbaa3fa8a82c372fa5a11b065a81","ssdeep":"384:mVQpefLuLEjrqKHU6e5zvEtEJEI1jlOcs2Il8d/sYsbzyyp:Hg26XYsfp","tlshash":"6f820f6c52f212324273717a65da834a7539801f99058e5e3e6c83842fc6db5abf3fd8","size":18219,"data":"","first_seen":"2025-11-24T12:48:58.687324Z","last_seen":"2025-12-18T06:43:52.619555Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tjgp6tas.top/js/countrys.js","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tjgp6tas.top/","date":"2025-12-01T03:27:59.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tjgp6tas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 13:32:31 GMT","end":"Fri, 27 Feb 2026 13:32:30 GMT"},"fingerprint":{"sha1":"3A:03:16:56:2A:B0:ED:33:65:2C:8D:34:8F:0A:F9:47:5C:7C:3B:1F","sha256":"E2:BE:7B:8A:1C:76:F8:9F:EC:A5:BD:B8:D9:5C:31:2C:14:AB:73:FF:FB:01:1E:60:4A:43:D7:E4:95:0B:DD:C9"}}},"request":{"raw":"GET /js/countrys.js HTTP/1.1\r\nHost: tjgp6tas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tjgp6tas.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 03:27:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Oct 2025 13:21:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fa2be2-61bcb\"\r\nexpires: Mon, 01 Dec 2025 15:27:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":400331,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"b471feec246cf5d39193cb4b7013473a","sha1":"b794dd4a2456fedc21cf723db8ef1fc4e996f722","sha256":"ac2cb6dd147c18c60c9e9cbc9a501e573858bfb4af2db396b57bb90102f40985","sha512":"69075678c230270a27994be515a98664eccd489d03e77a2115fd48911680df0212d16df3de03bc1e04dbf78816e8dc1e43d5784376531e85d41354705eff98d9","ssdeep":"6144:54tc4Hl4qI4jf4iKPGNLSYj7I/cD954qL/TvM8i4SDJhNbM3:m/1XB1tVnq+GDPNY3","tlshash":"2a94301e85728181956924b9197a3780b2295ee70eac3dbb3f5cdb813f5c21fab3075c","first_seen":"2025-12-01T03:28:26.464105Z","last_seen":"2025-12-18T06:43:52.60737Z","times_seen":2,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-01","alert":"Phishing - WhatsApp","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-01","alert":"Phishing Block","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/js/lang.js","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tjgp6tas.top/","date":"2025-12-01T03:27:59.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tjgp6tas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 13:32:31 GMT","end":"Fri, 27 Feb 2026 13:32:30 GMT"},"fingerprint":{"sha1":"3A:03:16:56:2A:B0:ED:33:65:2C:8D:34:8F:0A:F9:47:5C:7C:3B:1F","sha256":"E2:BE:7B:8A:1C:76:F8:9F:EC:A5:BD:B8:D9:5C:31:2C:14:AB:73:FF:FB:01:1E:60:4A:43:D7:E4:95:0B:DD:C9"}}},"request":{"raw":"GET /js/lang.js HTTP/1.1\r\nHost: tjgp6tas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tjgp6tas.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 03:27:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Oct 2025 13:21:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fa2be2-87ca\"\r\nexpires: Mon, 01 Dec 2025 15:27:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34762,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"405f0c437c34d7dab6bac936f1944e86","sha1":"df18172df67f9751d35f65ac190eaa5b03b2d94d","sha256":"8f1cd983ba62b64e6cca9a87920f097a0ba5da6f733a89a2e8d5adfede7cd2d7","sha512":"d581756db18ea45c787b628be206d4dc1a85c221cbf28c1131636e22777c8bc95bf905ccf4423ca8ef3c69afdb360a3d99e9f24ac6a5e1241f4ad0e2ca30e815","ssdeep":"768:JkQVFMVIVVR3gfzqyV96DPXv3/p5qHf8yL0Ak1NXcAy1nIXXXJ96XhQ+b:JvVFMVIVVR3gfz5VWXv/p5qHfh0Ak1NW","tlshash":"d7f29751935662730553c29528051a3aa9430a37ce65b9227f6e63802f6ef3fbfb316c","first_seen":"2025-11-24T12:48:58.688805Z","last_seen":"2025-12-18T06:43:52.61127Z","times_seen":3,"resource_available":true,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-01","alert":"Phishing Block","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-01","alert":"Phishing - WhatsApp","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/images/flag/af.png","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tjgp6tas.top/","date":"2025-12-01T03:28:00.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tjgp6tas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 13:32:31 GMT","end":"Fri, 27 Feb 2026 13:32:30 GMT"},"fingerprint":{"sha1":"3A:03:16:56:2A:B0:ED:33:65:2C:8D:34:8F:0A:F9:47:5C:7C:3B:1F","sha256":"E2:BE:7B:8A:1C:76:F8:9F:EC:A5:BD:B8:D9:5C:31:2C:14:AB:73:FF:FB:01:1E:60:4A:43:D7:E4:95:0B:DD:C9"}}},"request":{"raw":"GET /images/flag/af.png HTTP/1.1\r\nHost: tjgp6tas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tjgp6tas.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 03:28:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Oct 2025 04:34:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6902eaca-a66\"\r\nexpires: Wed, 31 Dec 2025 03:28:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2662,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 67, 8-bit/color RGBA, non-interlaced","md5":"220f72ed928d9acca25b44793670a8dc","sha1":"4414671d1572555ce706566c2ee25bcf6ca8538c","sha256":"57dfa1ea775bab7fa96d5213c7b10b6144a600ff4e6dabd0412c0eac8a8defac","sha512":"e8c78c8395fc256e8f3dadd81f81543eaa3a77c67b05452eb3054b9eab80c4a95283b5731f1b950094e56b57e6beca68849c11c65d5a2cc5e93aab729f08d474","ssdeep":"","tlshash":"6b515ca5db06ec42fa29496adbc11206b583025273006d211f309c49200b7756f79fe9","first_seen":"2023-05-14T22:54:02Z","last_seen":"2026-07-06T22:36:46.19454Z","times_seen":94,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-01","alert":"Phishing Block","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-01","alert":"Phishing - WhatsApp","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/images/flag/al.png","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tjgp6tas.top/","date":"2025-12-01T03:28:00.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tjgp6tas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 13:32:31 GMT","end":"Fri, 27 Feb 2026 13:32:30 GMT"},"fingerprint":{"sha1":"3A:03:16:56:2A:B0:ED:33:65:2C:8D:34:8F:0A:F9:47:5C:7C:3B:1F","sha256":"E2:BE:7B:8A:1C:76:F8:9F:EC:A5:BD:B8:D9:5C:31:2C:14:AB:73:FF:FB:01:1E:60:4A:43:D7:E4:95:0B:DD:C9"}}},"request":{"raw":"GET /images/flag/al.png HTTP/1.1\r\nHost: tjgp6tas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tjgp6tas.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 03:28:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 30 Oct 2025 04:34:18 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6902eaca-6df\"\r\nexpires: Wed, 31 Dec 2025 03:28:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1759,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 71, 8-bit colormap, non-interlaced","md5":"f27337407c55071f6cbf81a536447f9e","sha1":"32aa89c500e2cdfe3886ee070a308c92ed4e714a","sha256":"3a5ff0f38c4b0339315058becb7886ee10e1a5c98a7fb0792e2739065d33892b","sha512":"b0e44cd5c3a3a6215f126cd7eda79c8c7cb499dc51f83f8afe618fd59c1fbd5ceb5bb7c0a67c69115c7ddb98cc6d281c9135de025429979ccccf492ca78b9baf","ssdeep":"","tlshash":"76312b71de7aabb41af48144c00e21f7bfba90a09526ecad233c2c360767141275f676","first_seen":"2023-05-14T22:54:02Z","last_seen":"2026-07-06T22:36:46.144152Z","times_seen":97,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-01","alert":"Phishing Block","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-01","alert":"Phishing - WhatsApp","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.umami.dev/api/send","fqdn":"api-gateway.umami.dev","domain":"umami.dev","tld":"dev"},"ip":{"addr":"172.67.171.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tjgp6tas.top/","date":"2025-12-01T03:28:00.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"umami.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 10:33:07 GMT","end":"Thu, 08 Jan 2026 11:33:05 GMT"},"fingerprint":{"sha1":"43:94:9A:7D:50:DB:0F:BB:5C:07:9C:1C:AE:5C:9D:9E:BC:6D:25:93","sha256":"04:1E:21:5C:9D:F4:16:81:B5:DD:EC:85:9D:17:C3:10:4D:7F:57:FA:C4:B4:EB:6D:E7:EF:B7:DF:AA:31:32:44"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: api-gateway.umami.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tjgp6tas.top/\r\nContent-Type: application/json\r\nContent-Length: 206\r\nOrigin: https://tjgp6tas.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":206,"data":"{\"type\":\"event\",\"payload\":{\"website\":\"12cf830f-2dad-404f-81da-85bb0cc6af2d\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"title\":\"WhatsApp\",\"hostname\":\"tjgp6tas.top\",\"url\":\"https://tjgp6tas.top/\",\"referrer\":\"\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Dec 2025 03:28:00 GMT\r\ncontent-type: application/json\r\ncf-ray: 9a6f7df20bd6b4f9-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, accept-encoding\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\ncf-placement: local-OSL\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: on\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kc8LxbK7L8vuYPVBV99eOY2XrRGjybdhQjjeO%2BMxkFe%2BpK2pd4oHdiaLlCdJxoT40w90kLUqad7qlKGqgWC2w1u6kv%2BikbmHQ5M2NJpT3vPx8ZE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9eef71b06da0b3f21a03ac6ad4d1b260","sha1":"ee548d09bf7d049e9585b5feeb015d40f8b1ae7e","sha256":"47dad67fccc20ebd67d8097692a78cc02d6054f508228280fcc132b77e45b954","sha512":"e697d700fa99928865f94044373fe5a9bde8f923501747323fb32c38854a3b791f8c0d40fc0d3cb011c6ebffe20c56b0c6154ebae377fa97dd1423fb4516a568","ssdeep":"","tlshash":"e3e0ab1782d65ae9959e23c248ac4015589415f6a0a220a480bfa3707dba893211bfa5","first_seen":"2025-12-01T03:28:26.472006Z","last_seen":"2025-12-01T03:28:26.472006Z","times_seen":1,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pro.ip-api.com/json/?key=X8nNh9l0HcVYntp\u0026fields=countryCode,regionName,city","fqdn":"pro.ip-api.com","domain":"ip-api.com","tld":"com"},"ip":{"addr":"51.77.64.70","port":443,"asn":16276,"as":"OVH SAS","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tjgp6tas.top/","date":"2025-12-01T03:27:59.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ip-api.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 09 Jan 2025 00:00:00 GMT","end":"Mon, 09 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0C:9B:B2:2A:33:8A:C6:2E:4F:44:31:C5:E9:42:66:40:9B:18:A7:AB","sha256":"FF:25:55:B8:41:38:7D:AE:EB:04:48:46:DD:23:F2:43:68:93:68:3C:73:9B:04:7E:77:12:B4:EE:77:ED:C6:52"}}},"request":{"raw":"GET /json/?key=X8nNh9l0HcVYntp\u0026fields=countryCode,regionName,city HTTP/1.1\r\nHost: pro.ip-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tjgp6tas.top/\r\nOrigin: https://tjgp6tas.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccess-Control-Allow-Origin: *\r\nContent-Type: application/json; charset=utf-8\r\nDate: Mon, 01 Dec 2025 03:27:59 GMT\r\nContent-Length: 65\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d1d5e3e0af5636df14ca70a7324dcbad","sha1":"be98f16b75eb96511ad34f31428d74cfd666ee6e","sha256":"50cc6354cdfd66a0b9c67cb3cea0dfb090995267f4edf504159da2de6915a0d5","sha512":"00343c75e2fe4e782d293185959a5113d4e8bd91d0d33a33fdb46278d68b5b6e9bbb54e67b0e9af16cd6dc6b769dc80e3a2f1b95c042ab11dbd2c1cd7db759cf","ssdeep":"","tlshash":"7aa0220e00020bb8e230f2ca880fb02300a2080022808a03ccea2800a00088c0800202","first_seen":"2025-12-01T03:28:26.474476Z","last_seen":"2025-12-18T06:43:52.606518Z","times_seen":2,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":99,"dns":5,"connect":33,"send":0,"wait":33,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/images/flag/dz.png","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tjgp6tas.top/","date":"2025-12-01T03:28:00.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tjgp6tas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 13:32:31 GMT","end":"Fri, 27 Feb 2026 13:32:30 GMT"},"fingerprint":{"sha1":"3A:03:16:56:2A:B0:ED:33:65:2C:8D:34:8F:0A:F9:47:5C:7C:3B:1F","sha256":"E2:BE:7B:8A:1C:76:F8:9F:EC:A5:BD:B8:D9:5C:31:2C:14:AB:73:FF:FB:01:1E:60:4A:43:D7:E4:95:0B:DD:C9"}}},"request":{"raw":"GET /images/flag/dz.png HTTP/1.1\r\nHost: tjgp6tas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tjgp6tas.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 03:28:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 891\r\nlast-modified: Thu, 30 Oct 2025 04:34:19 GMT\r\netag: \"6902eacb-37b\"\r\nexpires: Wed, 31 Dec 2025 03:28:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":891,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 67, 8-bit colormap, non-interlaced","md5":"132ceca353a95c8214676b2e94ecd40f","sha1":"bad54ceb0195c312d8e7025aa20c700b84f112c7","sha256":"3eff241b095ff6670b497c6d716c1aebfdb0426340cd6ad67132d92268f2acfa","sha512":"2b9ad2a99207977d3d3bff7475c95aa68bba107243bfee70bbb1010dfa52045f7b61e383a630cc566675827fde1398c66861d1300a6ae5b2c71a84eeabb065bc","ssdeep":"","tlshash":"3b1167a50f64092ec60a6d6751f816086c03624653fed3ce460562355bea305b5cc65f","first_seen":"2023-05-06T09:49:14Z","last_seen":"2026-05-04T12:19:57.467003Z","times_seen":76,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-01","alert":"Phishing - WhatsApp","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-01","alert":"Phishing Block","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/images/flag/us.png","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tjgp6tas.top/","date":"2025-12-01T03:28:00.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tjgp6tas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 13:32:31 GMT","end":"Fri, 27 Feb 2026 13:32:30 GMT"},"fingerprint":{"sha1":"3A:03:16:56:2A:B0:ED:33:65:2C:8D:34:8F:0A:F9:47:5C:7C:3B:1F","sha256":"E2:BE:7B:8A:1C:76:F8:9F:EC:A5:BD:B8:D9:5C:31:2C:14:AB:73:FF:FB:01:1E:60:4A:43:D7:E4:95:0B:DD:C9"}}},"request":{"raw":"GET /images/flag/us.png HTTP/1.1\r\nHost: tjgp6tas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tjgp6tas.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 03:28:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 756\r\nlast-modified: Thu, 30 Oct 2025 04:34:19 GMT\r\netag: \"6902eacb-2f4\"\r\nexpires: Wed, 31 Dec 2025 03:28:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":756,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 53, 8-bit colormap, non-interlaced","md5":"83b065848d14d33c0d10a13e01862f34","sha1":"686ba730b3ece4c6f5f486ade4b2a98f2e845438","sha256":"25be2de75e2d2e55620068642f3225a7f90ff68fad65b6d1dc9d63daeafdbb74","sha512":"d72dd58cd336baeda12ed43b2a245150ff09ec8b050d14c9a2cbabcb0d7a1cbece8c348179fcb326ca09a3b53c4e6c965e4a5bc4acb250e8f4ba68c8f4387763","ssdeep":"","tlshash":"9f0120d01a149ddba93a8e4b0f29b222aba847304a138d4ee0198914a6126c83e8c701","first_seen":"2023-05-06T09:49:14Z","last_seen":"2026-07-19T13:35:46.941236Z","times_seen":366,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-01","alert":"Phishing Block","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-01","alert":"Phishing - WhatsApp","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/favicon.png","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tjgp6tas.top/","date":"2025-12-01T03:28:00.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tjgp6tas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 13:32:31 GMT","end":"Fri, 27 Feb 2026 13:32:30 GMT"},"fingerprint":{"sha1":"3A:03:16:56:2A:B0:ED:33:65:2C:8D:34:8F:0A:F9:47:5C:7C:3B:1F","sha256":"E2:BE:7B:8A:1C:76:F8:9F:EC:A5:BD:B8:D9:5C:31:2C:14:AB:73:FF:FB:01:1E:60:4A:43:D7:E4:95:0B:DD:C9"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: tjgp6tas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tjgp6tas.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 03:28:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 643\r\nlast-modified: Sun, 02 Nov 2025 08:18:55 GMT\r\netag: \"690713ef-283\"\r\nexpires: Wed, 31 Dec 2025 03:28:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":643,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"4a25be0c95d280005ea78d83fb18b922","sha1":"c70cd9f970418acb075d497d45fd7001b0d0fedd","sha256":"79addafadd1dcee91ec75407a2142d016b25028526301c4865578575be178659","sha512":"6813e1afb96716cfcce1a2071ce3e464e090242fa3d9cb17d69383a66c8034f9d550c94e7ed25052f2a4ea4da5c764bcfcd8fefb694a1763fc874a4466ba385f","ssdeep":"","tlshash":"33f0685911f1cc366fae3771837e5c584ae16d6186e91e1f51553d3a051cb341cc8335","first_seen":"2023-05-02T11:12:17Z","last_seen":"2026-07-18T09:48:58.975691Z","times_seen":9616,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-01","alert":"Phishing Block","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-01","alert":"Phishing - WhatsApp","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-01T03:27:58.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tjgp6tas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 13:32:31 GMT","end":"Fri, 27 Feb 2026 13:32:30 GMT"},"fingerprint":{"sha1":"3A:03:16:56:2A:B0:ED:33:65:2C:8D:34:8F:0A:F9:47:5C:7C:3B:1F","sha256":"E2:BE:7B:8A:1C:76:F8:9F:EC:A5:BD:B8:D9:5C:31:2C:14:AB:73:FF:FB:01:1E:60:4A:43:D7:E4:95:0B:DD:C9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tjgp6tas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 03:27:58 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 22 Nov 2025 05:04:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6921446f-2e366\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Socket.io","description":"","website":"https://socket.io","common_platform_enumeration":"","icon":"Socket.io.svg","categories":["JavaScript frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"libphonenumber","description":"libphonenumber is a JavaScript library for parsing, formatting, and validating international phone numbers.","website":"https://github.com/google/libphonenumber","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]}],"data":{"size":189286,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (28931), with CRLF line terminators","md5":"28c20f349ac64f8d432b2cf293f44efe","sha1":"6565a167a01df95c51ca742e31ecfcd6fafeb867","sha256":"97059aabd274afb4fa31098430954a0bcdee1f9a055dd29db70b0a43090b6801","sha512":"3a8abd482647fe360e4b511cdc089b884815509cf5391c74f114a9b59ac5bf0895f5f01d42de08971387b696307741e3fcf2b82b1bfb67eb74ab354d1ef55c04","ssdeep":"1536:agqgho7J6uYfmJTxK2SoPbs4idHjP2pyiDe1dH7lBynUf71dH9xyK/FkpTemP2Et:FV7uxTxKjjDi8lB2UfDyKGewiW","tlshash":"22044ba463d032708133e3f5dd2b8a19f76a10bb670985047adc9b915f71a68cb6bcdc","first_seen":"2025-12-01T03:28:26.480921Z","last_seen":"2025-12-01T03:28:26.480921Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1640,"timings":{"blocked":711,"dns":277,"connect":213,"send":0,"wait":214,"receive":0,"ssl":221},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-01","alert":"Phishing Block","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-01","alert":"Phishing - WhatsApp","trigger":"tjgp6tas.top/","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cloud.umami.is/script.js","fqdn":"cloud.umami.is","domain":"umami.is","tld":"is"},"ip":{"addr":"104.26.1.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tjgp6tas.top/","date":"2025-12-01T03:27:59.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"umami.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Oct 2025 07:21:15 GMT","end":"Sat, 24 Jan 2026 08:20:57 GMT"},"fingerprint":{"sha1":"5E:CE:58:D1:24:E9:A4:D3:C4:54:62:2F:ED:BC:90:46:CE:B9:82:08","sha256":"5C:EE:F2:62:8C:F9:29:FE:9E:A7:DB:B4:5E:DC:97:94:41:A7:07:3A:91:4B:61:6D:69:EF:79:CC:51:81:27:AF"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: cloud.umami.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tjgp6tas.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Dec 2025 03:27:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1557\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 74125\r\ncache-control: public, max-age=86400, must-revalidate\r\ncontent-disposition: inline; filename=\"script.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors *;\r\netag: \"04f56fcd86aa62ad487027d990a10544\"\r\nlast-modified: Wed, 26 Nov 2025 19:06:15 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-dns-prefetch-control: on\r\nx-frame-options: SAMEORIGIN\r\nx-matched-path: /script.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1:arn1:arn1::h7wzr-1764399137947-91e9046af528\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=blKnnSwwCTcuWzrcMz%2Fg%2BM7HnpP%2B0Eqs0dhgpQlUS1koHL4j99sF3h88%2Fn%2BjmnYtyuVWAASGKr%2BOsF76a8ToLrAWHTYEz0s902vnBxg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\ncf-ray: 9a6f7dec79a83181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2657,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2656)","md5":"469154509c4b055d8d9432e408e12c7f","sha1":"2ba57a6cb729b669f4c9bcf0225f758f30514ffe","sha256":"8597111111776a4b0498f5c6372fbe2ccc7db96f8e2c155806265c85e0b876ed","sha512":"92f002a52d314d79aecc960479777d280229d5daa762c80d63dd0d5bee86706a17352999c8dc12d93d6a1c00dbe1eeee69ef20210c5963ade708335577d9b75e","ssdeep":"","tlshash":"8951e8f672c4b0f17f7a34d0d1b96224b9261a71783b4081b6fe4c979b1e40ba130e69","first_seen":"2025-11-15T06:15:41.447851Z","last_seen":"2025-12-04T04:41:05.775718Z","times_seen":159,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":19,"dns":3,"connect":1,"send":0,"wait":6,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/images/tips.jpg","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tjgp6tas.top/","date":"2025-12-01T03:27:59.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tjgp6tas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 13:32:31 GMT","end":"Fri, 27 Feb 2026 13:32:30 GMT"},"fingerprint":{"sha1":"3A:03:16:56:2A:B0:ED:33:65:2C:8D:34:8F:0A:F9:47:5C:7C:3B:1F","sha256":"E2:BE:7B:8A:1C:76:F8:9F:EC:A5:BD:B8:D9:5C:31:2C:14:AB:73:FF:FB:01:1E:60:4A:43:D7:E4:95:0B:DD:C9"}}},"request":{"raw":"GET /images/tips.jpg HTTP/1.1\r\nHost: tjgp6tas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tjgp6tas.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 03:27:59 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 23 Oct 2025 13:21:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fa2be2-16b66\"\r\nexpires: Wed, 31 Dec 2025 03:27:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93030,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1213x764, components 3","md5":"f69e28b1c074c84ca8f9e4a1423be3af","sha1":"c196de8f83b30de5112061bd659cebc405ed0dc6","sha256":"e9b5dad97bab69a572ad9280b12eec39374f64cb0e51ee22877df9a26d559606","sha512":"3927a6d55116981e66a4d1902ac550fcafca6f2b29986a08dc9f7c2079ccce2075bef9685a85aa2a5fcad9ec1d371c4dff532c9dc8a408b4d021e194dc49fb03","ssdeep":"1536:KsmEtmdq3X3B+boQYjLJArNzUnaYIGAOJZJoQaGxBp84C9aJY2p/wSBrP2tteygf:Hztmdq388njL6rDTGhJZJoGxBVC9aJV1","tlshash":"4193f1b02959401cc2107b7b88019172b4f5ed47dabd487fdee58c71b85c6ba8a1bef8","first_seen":"2025-07-01T16:42:08.859133Z","last_seen":"2025-12-18T06:43:52.610311Z","times_seen":11,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-01","alert":"Phishing Block","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-01","alert":"Phishing - WhatsApp","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/js/socket.io.js","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tjgp6tas.top/","date":"2025-12-01T03:27:59.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tjgp6tas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 13:32:31 GMT","end":"Fri, 27 Feb 2026 13:32:30 GMT"},"fingerprint":{"sha1":"3A:03:16:56:2A:B0:ED:33:65:2C:8D:34:8F:0A:F9:47:5C:7C:3B:1F","sha256":"E2:BE:7B:8A:1C:76:F8:9F:EC:A5:BD:B8:D9:5C:31:2C:14:AB:73:FF:FB:01:1E:60:4A:43:D7:E4:95:0B:DD:C9"}}},"request":{"raw":"GET /js/socket.io.js HTTP/1.1\r\nHost: tjgp6tas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tjgp6tas.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 03:27:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 31 Oct 2025 13:13:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6904b5e1-25a78\"\r\nexpires: Mon, 01 Dec 2025 15:27:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154232,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e58246b00ec1a9b307d4fd2a8b68afd6","sha1":"21ab9f9e0a1c683f51c1f0cbca3b6baa074b2ec2","sha256":"238040837b5172381b31d5721c7ff8993bdb761be29547b503e3a9b4e14c0f13","sha512":"f011f11c32ec387c7e7e522b4340eb65c79aecc907a9153919b4c799b7733119c06a8088919f7b3ea65c5c990a65c90c321a9fa1e68913e0cd515bb2a10b0edd","ssdeep":"3072:GLTygHMCO2KsFpWw0axSNZiXym7dSBg18FEEaLH32emV/8fkmh0KbhEGtkSWq:GLTyTX1sFpWw0ayBgaEEaLH32emV/ak0","tlshash":"81e35f49aaf72151917330398bafa045f239d01b220ace443d1cd7f49f65b3897a6fe9","first_seen":"2024-12-14T23:53:09.636549Z","last_seen":"2026-07-21T12:16:30.5129Z","times_seen":603,"resource_available":true,"data":null}},"time_used":585,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-01","alert":"Phishing Block","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-01","alert":"Phishing - WhatsApp","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/images/set.png","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tjgp6tas.top/","date":"2025-12-01T03:28:00.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tjgp6tas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 13:32:31 GMT","end":"Fri, 27 Feb 2026 13:32:30 GMT"},"fingerprint":{"sha1":"3A:03:16:56:2A:B0:ED:33:65:2C:8D:34:8F:0A:F9:47:5C:7C:3B:1F","sha256":"E2:BE:7B:8A:1C:76:F8:9F:EC:A5:BD:B8:D9:5C:31:2C:14:AB:73:FF:FB:01:1E:60:4A:43:D7:E4:95:0B:DD:C9"}}},"request":{"raw":"GET /images/set.png HTTP/1.1\r\nHost: tjgp6tas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tjgp6tas.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 03:28:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 362\r\nlast-modified: Thu, 23 Oct 2025 13:21:38 GMT\r\netag: \"68fa2be2-16a\"\r\nexpires: Wed, 31 Dec 2025 03:28:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":362,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 18, 8-bit gray+alpha, non-interlaced","md5":"30b6a3d45390511c9192a6771301f634","sha1":"75cc3c788be4b9272178e5e161c2c74fb69df662","sha256":"7d987d57adfc78fa54cfb3236f5315b31dec504156b6c9bb5f4833e8077354f5","sha512":"1c2df18ca2165156d29a3e098af8fcaa689a534b43ceb615ab0c4bb96e7305d14362384a541e26337c61b1633791441a894d0f8d54ec0db460b00b83356cb4dc","ssdeep":"","tlshash":"79e060f19043182e8f285085288010b05c92424ad14b9a210c0a123632d836842186f3","first_seen":"2025-07-01T16:42:08.840755Z","last_seen":"2025-12-18T06:43:52.609262Z","times_seen":11,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-01","alert":"Phishing - WhatsApp","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-01","alert":"Phishing Block","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-gateway.umami.dev/api/send","fqdn":"api-gateway.umami.dev","domain":"umami.dev","tld":"dev"},"ip":{"addr":"172.67.171.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tjgp6tas.top/","date":"2025-12-01T03:28:00.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"umami.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Oct 2025 10:33:07 GMT","end":"Thu, 08 Jan 2026 11:33:05 GMT"},"fingerprint":{"sha1":"43:94:9A:7D:50:DB:0F:BB:5C:07:9C:1C:AE:5C:9D:9E:BC:6D:25:93","sha256":"04:1E:21:5C:9D:F4:16:81:B5:DD:EC:85:9D:17:C3:10:4D:7F:57:FA:C4:B4:EB:6D:E7:EF:B7:DF:AA:31:32:44"}}},"request":{"raw":"OPTIONS /api/send HTTP/1.1\r\nHost: api-gateway.umami.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://tjgp6tas.top/\r\nOrigin: https://tjgp6tas.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Dec 2025 03:28:00 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-max-age: 86400\r\ncf-placement: local-OSL\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UcMXeU2lRT5%2FXyCNhtcP0Oq5cihTgQF5TzXOPk7QugIX2h1MqgOyyJGPjQq3qoR%2FpulRLLiB1y8%2B40U9wdV7zT6A6%2BAZE450fFIGhdMy%2B5x4gbg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 9a6f7df1fbd0b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T09:23:56.696047Z","times_seen":17446383,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":90,"dns":63,"connect":1,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/js/libphonenumber-js.min.js","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tjgp6tas.top/","date":"2025-12-01T03:27:59.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tjgp6tas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 13:32:31 GMT","end":"Fri, 27 Feb 2026 13:32:30 GMT"},"fingerprint":{"sha1":"3A:03:16:56:2A:B0:ED:33:65:2C:8D:34:8F:0A:F9:47:5C:7C:3B:1F","sha256":"E2:BE:7B:8A:1C:76:F8:9F:EC:A5:BD:B8:D9:5C:31:2C:14:AB:73:FF:FB:01:1E:60:4A:43:D7:E4:95:0B:DD:C9"}}},"request":{"raw":"GET /js/libphonenumber-js.min.js HTTP/1.1\r\nHost: tjgp6tas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tjgp6tas.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 03:27:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 24 Oct 2025 01:56:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fadcb5-2afe6\"\r\nexpires: Mon, 01 Dec 2025 15:27:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":176102,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"77286f8062a4e7301e1707652321fb0f","sha1":"271acd6fee6b3cee7c600871d4f7bc8d7256bf41","sha256":"dd2c4f3eac466531562ff71a954d7c2e15a5813d77ef38f93ba4ab3d3d8a3848","sha512":"c92d001e4492d3d5421f6c2a34b0efeea67b45a41084bd8e7c26de4e04ecd8f4ab48f8572a6ed0bf07b723587f70242d834125b221c8db2b18bcd2577e0487a9","ssdeep":"1536:TOe0tNo455wjffgIKKDyXG1ojrxmHMN45Y7qWRD6KHKQMWNRVHhK+/1hFddNzTmz:TOe03o4Pwj1qxYMb+/0zhKyHvDq6N1lQ","tlshash":"ba04c9f77540bb7774b13b188e1ad24fab9c9c51dc98a08cdbe3d8da5d6182220bdb14","first_seen":"2024-08-19T21:23:26.913691Z","last_seen":"2026-07-21T06:13:16.821811Z","times_seen":42,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-01","alert":"Phishing Block","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-01","alert":"Phishing - WhatsApp","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/css/a.css","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tjgp6tas.top/","date":"2025-12-01T03:27:59.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tjgp6tas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 13:32:31 GMT","end":"Fri, 27 Feb 2026 13:32:30 GMT"},"fingerprint":{"sha1":"3A:03:16:56:2A:B0:ED:33:65:2C:8D:34:8F:0A:F9:47:5C:7C:3B:1F","sha256":"E2:BE:7B:8A:1C:76:F8:9F:EC:A5:BD:B8:D9:5C:31:2C:14:AB:73:FF:FB:01:1E:60:4A:43:D7:E4:95:0B:DD:C9"}}},"request":{"raw":"GET /css/a.css HTTP/1.1\r\nHost: tjgp6tas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tjgp6tas.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 03:27:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 23 Oct 2025 13:21:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fa2be2-8e712\"\r\nexpires: Mon, 01 Dec 2025 15:27:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":583442,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19188)","md5":"cb22a6f6da2fdf9746a09424622c562f","sha1":"abeed9a39549a42c9559dbfbd7b5712b3b5567c2","sha256":"5df6deffb593e80ac3252237ccf23fceef782b97a53290e81bbd128ee84d79f4","sha512":"5c7e6eb1f151404843228eeebb7e7d321aa472bfd68d69d1c4d96237e1f8a17a6a3010dd49262e385f5b604b9e43c95c6383bc047fbec3dff7b85135825df342","ssdeep":"12288:HXFD9he/sc+vrp0G02Kz5/XEDmrJHVWI+y+lsjaY+xj:HXFUxY","tlshash":"5fc47492b6f14968b52fd22b31d5d658b37eefc6a80ddd587ed8b0284e883fc1162d01","first_seen":"2025-11-24T12:48:58.668558Z","last_seen":"2025-12-18T06:43:52.605921Z","times_seen":3,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-01","alert":"Phishing Block","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-01","alert":"Phishing - WhatsApp","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/images/ws.png","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tjgp6tas.top/","date":"2025-12-01T03:28:00.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tjgp6tas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 13:32:31 GMT","end":"Fri, 27 Feb 2026 13:32:30 GMT"},"fingerprint":{"sha1":"3A:03:16:56:2A:B0:ED:33:65:2C:8D:34:8F:0A:F9:47:5C:7C:3B:1F","sha256":"E2:BE:7B:8A:1C:76:F8:9F:EC:A5:BD:B8:D9:5C:31:2C:14:AB:73:FF:FB:01:1E:60:4A:43:D7:E4:95:0B:DD:C9"}}},"request":{"raw":"GET /images/ws.png HTTP/1.1\r\nHost: tjgp6tas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tjgp6tas.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 03:28:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 670\r\nlast-modified: Thu, 23 Oct 2025 13:21:38 GMT\r\netag: \"68fa2be2-29e\"\r\nexpires: Wed, 31 Dec 2025 03:28:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":670,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit colormap, non-interlaced","md5":"1aaca3b5dfacbd4f01b68061d65b4e83","sha1":"8109634686e880c84501f067f9e9864b59775de1","sha256":"ff7026b07ae8507e400096c952278db8504ec53aecd6142c8bcb1a8c3627ac6a","sha512":"995d78b70fdc5b7fb1ee78611ddc1b644ba53e3fb8433a632c93c1c8d93781b5d06f0ebb9e12ab6e97c8322e47f70d358156a9a04ae25fee5163867730af4bff","ssdeep":"","tlshash":"9601231383787e3da4e704ba185d2d0f6a096d8c9d3857fb69b8e7223401311c2713a2","first_seen":"2025-07-01T16:42:08.849329Z","last_seen":"2026-01-11T07:06:08.525342Z","times_seen":21,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-01","alert":"Phishing Block","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-01","alert":"Phishing - WhatsApp","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/images/menu.png","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tjgp6tas.top/","date":"2025-12-01T03:28:00.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tjgp6tas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 13:32:31 GMT","end":"Fri, 27 Feb 2026 13:32:30 GMT"},"fingerprint":{"sha1":"3A:03:16:56:2A:B0:ED:33:65:2C:8D:34:8F:0A:F9:47:5C:7C:3B:1F","sha256":"E2:BE:7B:8A:1C:76:F8:9F:EC:A5:BD:B8:D9:5C:31:2C:14:AB:73:FF:FB:01:1E:60:4A:43:D7:E4:95:0B:DD:C9"}}},"request":{"raw":"GET /images/menu.png HTTP/1.1\r\nHost: tjgp6tas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tjgp6tas.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 03:28:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 179\r\nlast-modified: Thu, 23 Oct 2025 13:21:38 GMT\r\netag: \"68fa2be2-b3\"\r\nexpires: Wed, 31 Dec 2025 03:28:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":179,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 18 x 20, 8-bit/color RGBA, non-interlaced","md5":"dda018b914f937262a3bb14b8a63b532","sha1":"e77cfdd5cf66adbd0ab9496edfbd9cfa201f393d","sha256":"3fd25f3c8e75d71a833979e6f8ddc800a062121b3a5455ebce29eb340e6c11de","sha512":"30f1fee84ccb5853e11412e8ff0d1c5b72a72bbc595d0a97dba10c2383dd22d90c5e53e6df5fece0febad29cff2d681b3421e4c0bfb6112b314f6f465aab8be4","ssdeep":"","tlshash":"b0c02295eb09ac62c7c38233232c0d90e331170480221406000a8e38608866d518270b","first_seen":"2025-07-01T16:42:08.863467Z","last_seen":"2025-12-18T06:43:52.608728Z","times_seen":11,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-01","alert":"Phishing Block","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-01","alert":"Phishing - WhatsApp","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/images/flag/no.png","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tjgp6tas.top/","date":"2025-12-01T03:28:00.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tjgp6tas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 13:32:31 GMT","end":"Fri, 27 Feb 2026 13:32:30 GMT"},"fingerprint":{"sha1":"3A:03:16:56:2A:B0:ED:33:65:2C:8D:34:8F:0A:F9:47:5C:7C:3B:1F","sha256":"E2:BE:7B:8A:1C:76:F8:9F:EC:A5:BD:B8:D9:5C:31:2C:14:AB:73:FF:FB:01:1E:60:4A:43:D7:E4:95:0B:DD:C9"}}},"request":{"raw":"GET /images/flag/no.png HTTP/1.1\r\nHost: tjgp6tas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tjgp6tas.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 03:28:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 260\r\nlast-modified: Thu, 30 Oct 2025 04:34:19 GMT\r\netag: \"6902eacb-104\"\r\nexpires: Wed, 31 Dec 2025 03:28:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":260,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 73, 8-bit colormap, non-interlaced","md5":"33bc70259c4908b7b9adeef9436f7a9f","sha1":"33d80b25d30b82c30e77ca84c352480f64cbe621","sha256":"d0772c967dc04066f26913165ae380c6af5ad013b2b27dac726d14d294a9bc47","sha512":"6298f39c8b35791d0cd196852cfc9d9e24cd3b34b94e6cdd6bcced946ebc4885a7b46d15788d5869cede55195ca2e3051d2e37a3137838ca7e4e0c0dc37f314e","ssdeep":"","tlshash":"b0d02be256660c04a61504222c2d5189c51601d9ef42c084e6b2ecf80a6230e4600345","first_seen":"2023-05-14T22:54:02Z","last_seen":"2026-07-19T10:50:00.398527Z","times_seen":288,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":214,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-01","alert":"Phishing Block","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-01","alert":"Phishing - WhatsApp","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"tjgp6tas.top/socket.io/?clientId=2cbec8a3-7de7-49ad-8671-7acea9dfc4c1\u0026EIO=4\u0026transport=websocket","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://tjgp6tas.top/","date":"2025-12-01T03:28:00.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tjgp6tas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 13:32:31 GMT","end":"Fri, 27 Feb 2026 13:32:30 GMT"},"fingerprint":{"sha1":"3A:03:16:56:2A:B0:ED:33:65:2C:8D:34:8F:0A:F9:47:5C:7C:3B:1F","sha256":"E2:BE:7B:8A:1C:76:F8:9F:EC:A5:BD:B8:D9:5C:31:2C:14:AB:73:FF:FB:01:1E:60:4A:43:D7:E4:95:0B:DD:C9"}}},"request":{"raw":"GET /socket.io/?clientId=2cbec8a3-7de7-49ad-8671-7acea9dfc4c1\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: tjgp6tas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://tjgp6tas.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 1OPFneIaEQXUiug0k2EfRw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Mon, 01 Dec 2025 03:28:00 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: yJ63mR+x4x1A8qihTJ8OSsIwzDs=\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T09:23:56.696047Z","times_seen":17446383,"resource_available":true,"data":null}},"time_used":743,"timings":{"blocked":0,"dns":67,"connect":219,"send":0,"wait":226,"receive":0,"ssl":231},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-01","alert":"Phishing Block","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-01","alert":"Phishing - WhatsApp","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tjgp6tas.top/favicon.png","fqdn":"tjgp6tas.top","domain":"tjgp6tas.top","tld":"top"},"ip":{"addr":"115.126.13.15","port":443,"asn":38186,"as":"Forewin Telecom Group Limited, ISP at","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tjgp6tas.top/","date":"2025-12-01T03:28:00.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tjgp6tas.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 13:32:31 GMT","end":"Fri, 27 Feb 2026 13:32:30 GMT"},"fingerprint":{"sha1":"3A:03:16:56:2A:B0:ED:33:65:2C:8D:34:8F:0A:F9:47:5C:7C:3B:1F","sha256":"E2:BE:7B:8A:1C:76:F8:9F:EC:A5:BD:B8:D9:5C:31:2C:14:AB:73:FF:FB:01:1E:60:4A:43:D7:E4:95:0B:DD:C9"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: tjgp6tas.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tjgp6tas.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 03:28:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 643\r\nlast-modified: Sun, 02 Nov 2025 08:18:55 GMT\r\netag: \"690713ef-283\"\r\nexpires: Wed, 31 Dec 2025 03:28:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":643,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"4a25be0c95d280005ea78d83fb18b922","sha1":"c70cd9f970418acb075d497d45fd7001b0d0fedd","sha256":"79addafadd1dcee91ec75407a2142d016b25028526301c4865578575be178659","sha512":"6813e1afb96716cfcce1a2071ce3e464e090242fa3d9cb17d69383a66c8034f9d550c94e7ed25052f2a4ea4da5c764bcfcd8fefb694a1763fc874a4466ba385f","ssdeep":"","tlshash":"33f0685911f1cc366fae3771837e5c584ae16d6186e91e1f51553d3a051cb341cc8335","first_seen":"2023-05-02T11:12:17Z","last_seen":"2026-07-18T09:48:58.975691Z","times_seen":9616,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-01","alert":"Phishing Block","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-01","alert":"Phishing - WhatsApp","trigger":"tjgp6tas.top","verdict":"phishing","severity":"medium","comment":"WhatsApp","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"tjgp6tas.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}