{"report_id":"e8e2f0d6-f92a-4e72-9268-b205e558b436","version":6,"status":"done","tags":[],"date":"2026-06-06T23:45:44Z","url":{"schema":"http","addr":"20268-tg.cc","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"title":"BT","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"20268-tg.cc","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-11T23:45:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":12}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"20268-tg.cc","ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-03","domain_rank":0,"first_seen":"2026-06-06T23:45:49.373547Z","last_seen":"2026-06-06T23:45:49.373547Z","alert_count":498,"request_count":83,"received_data":7894604,"sent_data":40326,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.20268-tg.cc","ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-03","domain_rank":0,"first_seen":"2026-06-06T01:45:45.107543Z","last_seen":"2026-06-06T01:45:45.107543Z","alert_count":96,"request_count":16,"received_data":599107,"sent_data":8803,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s2.coinmarketcap.com","ip":{"addr":"52.84.50.63","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-28","domain_rank":209181,"first_seen":"2018-01-12T04:47:19Z","last_seen":"2026-06-06T06:42:47.636946Z","alert_count":0,"request_count":12,"received_data":42127,"sent_data":5475,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-06-03T20:20:47.953717Z","alert_count":0,"request_count":1,"received_data":116674,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-31T22:18:21.058888Z","alert_count":0,"request_count":2,"received_data":66438,"sent_data":1042,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sc-static.net","ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-16","domain_rank":3142,"first_seen":"2017-09-05T18:35:04Z","last_seen":"2026-06-04T06:28:40.185936Z","alert_count":0,"request_count":1,"received_data":59923,"sent_data":412,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"20268-tg.cc/js/JUTSvMR6ChBRYUpAzv.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3daf8da667e5e94fc3b77629f6ed9424","sha1":"bf7270ff9f8afccdbf0e345ee9c903dd238642bd","sha256":"e6ee91cbc86f4cc902de63d0bb67a8f5383d9440b82f30332efaf4c92c1f0e35","sha512":"77e1a178734db809d1e1c7288cec627bd83fb1cb1439bc81b427ad14de808ad67d72577b29d0cde4ac6be8892590521f2abc812bb1c548053935a3c9f449b2b7","ssdeep":"","tlshash":"33b0122f080810b099480c8d230c90230730192d33932a802218895d43591a2c14e655","size":97,"data":"","first_seen":"2026-06-06T01:45:51.894509Z","last_seen":"2026-06-06T23:51:55.883977Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/sd3xUpDSrmD_8wQR19.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"183da5351f774e4eb7f7b40a0c3d280b","sha1":"9aeb53bd2ea95c823faa003ba5f5c12d82617c32","sha256":"2e6dfe5abcafafcd83b850e264e64249c6395e7360eeebbe372e4f9f4776bebf","sha512":"17dd50a3564b43636b21721e10717ac8a18ecc464cc942d9e376258e7fdd57ad1a5504c259129ce4da0c870fa319cc8f5423a8322343336af813cfe9e0907729","ssdeep":"","tlshash":"3e01885fbc5efdf8706348f514c61869310a4f2df67949c0e2b1173151d2410d01b74c","size":707,"data":"","first_seen":"2026-06-06T01:45:51.876293Z","last_seen":"2026-06-06T23:51:55.839999Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/X3JQMLj6cumcmGumKt.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4b6718259675abb2f90e9ec59af03db1","sha1":"28395422bbfaad9cf49d528d3b89ad58f82c657e","sha256":"7bca131e84bd9ec5c53ac64ca15310b0702dfb83c93b89eefdcba8e64d52cfdd","sha512":"ecad0daa68620392005d9e048d51683eb6e4ead47b84cd3a656f28a65808d95db30462278e88b18343c14bf722cfb5bc88123da44a9962a6e4967a35b729ba0c","ssdeep":"192:oQ5eIDNnwkmJJexKjWHovWEj2V5IrscoNtBrNMaO7K+UawhZC7Jfk25mXX1Nkauf:oQ5HnQvhjQeWyFCrqaO7zUaP7Jf41ulN","tlshash":"d1629eb73b98d67acb702cf8600a55f2ecd6586f6ff54d84d89800a487e0c90cd5e782","size":14948,"data":"","first_seen":"2026-06-06T01:45:51.86203Z","last_seen":"2026-06-06T23:51:55.896234Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2c19cc74937e987332b796f96e1d4bff","sha1":"626b5843a48fc0d3b2792ac99f6503faeb8760c6","sha256":"d6ffd8cbd2a327856f7fe339d4bf460940bcfd4e32ea569b11f6ebccc74ff9c1","sha512":"2f3c983ae702759f0d94f07011004788c6d9a82090647e01dbcf3a4b950634ffa611ea18705e2aa0b8b5567fb376f98dba64b090267f8689caa5281bbd08acea","ssdeep":"","tlshash":"c3c08cc5a0c22d10160aa61110bf25e49034442674485b028c98d8883e220b08333ee8","size":147,"data":"","first_seen":"2024-03-11T20:01:51Z","last_seen":"2026-06-06T23:51:55.936255Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/j4eCAO0VYlCYrq9yV8.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4a842bc5b5100338454f23472672b3e5","sha1":"9cf061a337cc893391f2bcb814ab1e7a82b28b82","sha256":"d37b1e186117d181014648514a217a26edc938148decc407b0ed2b8c9ea6ab29","sha512":"d4625e79e2366b664cfc4124d082a2c84457a41cb4f7d5cfffc18d401f52e51cdb126e30b3ff73bb62e5f3de4d731689d26e8941e43961af71a6a7dc50e3d8be","ssdeep":"","tlshash":"c4f00e6694ccdc30472ffa8c801872d1021ccab8c33042c8ec5e629ee3e9478c65df20","size":503,"data":"","first_seen":"2026-06-06T01:45:51.867202Z","last_seen":"2026-06-06T23:51:55.893354Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/MGzSXaUi56eVIHNsue.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"330e518899a09c0fcb250ec0e0bcc48b","sha1":"b4fb0de70b2c1e4d23a840fcffd15f1895784ea5","sha256":"a032d965219a3243e088a45f5669a1c1abaeea2b71aafe8aad26dbb1db6c7c3a","sha512":"cba31c32da3b02244f5c1b0345997a43fb884580777f18e716d488c5bc2bd35a3397e2b98b17186937031855dee2880301a16f2f5c9eab9cb7116573f1eeaae1","ssdeep":"","tlshash":"2001258c58eacbf9c49702582d8a10a5d0506b4c9b35d965f05cad22638fcf095de738","size":790,"data":"","first_seen":"2026-06-06T01:45:51.891621Z","last_seen":"2026-06-06T23:51:55.900196Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/EmSxZazYwNBEWLZIlX.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4a90d53048319ad35a3cae4d2158b8f6","sha1":"19c2676d0b4c5e26c63f90bdb389d6a1e69dee7f","sha256":"43b8ff164551996ea5ee84dab4b42574159a19df7615666c55c656b99726e990","sha512":"0369077f5b22dc41bb71e3a8433fedec8b566fe4306606150f54e545a3053b4c7c7f34f2473ba761e3784a03a2b3014e8115071dc0b50bc49356559390b47619","ssdeep":"96:AazdRuMfPzqfcSFuxEY16+NZgLUq6zfemq6Y7+t6k1YU6pJ:vzdR7Pz4cSICYyUh5Ghr","tlshash":"7a810088781789fc84ed0624ec1764d0a5cf2bedd03409a1b0fedd1626d69a0cf96bf8","size":4103,"data":"","first_seen":"2026-06-06T01:45:51.908896Z","last_seen":"2026-06-06T23:51:55.856744Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"02408d922d2e1998a79d8d6f850a8fa5","sha1":"05881ad7e2edf93b804c00b4998f794b9be830e2","sha256":"2864865ce925856a2bf5886ef5970aa3f3c2c592f2f6963f42fc77308efe5b95","sha512":"d79c14118cc3f703cf56276c6432e4c886ed04c65964fa528d842d1f2efb256ea5cb7f313b5dcf870032fddad8b695ac049c3d0de86f8ceeb0a5932b7586cc2a","ssdeep":"","tlshash":"c9c08cc4a0c26d105602645010af24e490244027b0481b028cd4d8482e220b08233e98","size":137,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-06-06T23:51:55.93502Z","times_seen":975,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"daacac50f9080c664e3c746d0c671063","sha1":"87b915fdfed73c4deb380a2cf503891094e36561","sha256":"cba5e9c7e935dfea901bd5156062afe2aa4dc3bae35fb9f77d9a14daef0a1f7d","sha512":"9da4ed4754835f0a7b0a1cf0b4bdecfa6292ebf67c5d1abb0b819750a911ddc35e8cea64739c99a0a63042e1a5db5a10c326deb4d540d19fb45378030c1a3cf6","ssdeep":"24576:DIwfzQgkPQa1b9JNvXRFwYm8NbQm5wYRG2Plz:k8T8HpJDF7m8lQK","tlshash":"07754a04641bcabce8f361a498989841b9693fefc115d516b2fc082727c7c78bbd97b4","size":1655321,"data":"","first_seen":"2026-06-06T01:45:51.969185Z","last_seen":"2026-06-06T23:51:55.921289Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7fc2131866c38ef4ff724bd98efff367","sha1":"df6ff71a44c573e84a622b07e56861450715dc60","sha256":"ad0b252875780cf92a0c79ab806df4f30c9490a10dad56be6d86117993558fb2","sha512":"a339e93c7702b02377c1c573b5d14ac25536fc7fee1b23439041dd2faf100b9a578a3f551489962a6afa00e7630a13af528880da26118e943831080081d52367","ssdeep":"","tlshash":"20c08cc4a0d22d001602a41010bf24e49024402670481b028c94e8483e220b08233e9c","size":136,"data":"","first_seen":"2023-12-01T02:41:08Z","last_seen":"2026-06-06T23:51:55.929984Z","times_seen":310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/Wrg0OYHDZ7C1Uy1V8f.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a7d5ed6f2b1a0d4cf04a10c2f6673744","sha1":"6ca0569db854151b5b26c60954a1664e44514ed9","sha256":"a14e68372723f42c4fe5579fa6d5dd98002f264297ecea8f1272f61a11855a9b","sha512":"da0a13e4589b1845858c7374d11d7b93743cc6bb2b1670b033f536573d1ddcb65a136e2260cc112968e9d8317f3dcd59c54d0833b36cb57e358686a6e8ab1e3f","ssdeep":"","tlshash":"e5210292f08df17d82ff39b6a85b5016c3615bd0336041cc77bb058e47269d1956ba1f","size":1269,"data":"","first_seen":"2026-06-06T01:45:51.91461Z","last_seen":"2026-06-06T23:51:55.834169Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/q9KnyViAuhB8RPQvEu.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c613846fce4ebb29907f2a96b5d0da04","sha1":"294d4be0c343b69821df43b0fa5351e0ddf2a84e","sha256":"7ad8ed3ede28ff879e59a8068c5de77450a8eff903e01419203f2f5f5c3e5d76","sha512":"1dda5c2ec2367861cd081e3f33dfb016a5bfbac4f0de4f23149d5c5dfdba6386935d20e3416f3b5000705746f7de95714887a9b2481bf6766bbbb87a421890fe","ssdeep":"","tlshash":"6d21211d6402db79d897495ce09c1802518c3feb9379c991f0eead2aa6d1eb0463e334","size":1237,"data":"","first_seen":"2026-06-06T01:45:51.886743Z","last_seen":"2026-06-06T23:51:55.855917Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6150a1c6197ff7e9ec85d1214825c8eb","sha1":"f28ab613765ba19af8baae0a49a255841efac7d9","sha256":"db158c1ce65630463b521eaceffbe394f6e613e87ab7c363839cfe1d781d1e39","sha512":"1e0a9160c81f65e7c109bc0ac536e968bf1be75345619f03c4beeca046ff18cf55fae30a3ab3ab5c09a35d28bfcc585ec5cc9d3a88163df32ac63597aa0cf6d5","ssdeep":"","tlshash":"8ec08cc9b0c72d5026026a5514ff25e49034402a708c2b03edd8e84a3e320b08233e9c","size":150,"data":"","first_seen":"2023-09-24T22:56:45Z","last_seen":"2026-06-06T23:51:55.924697Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bf511e0fc7bebf8446379a7876860af5","sha1":"92d699007efad44cf56c9b118816d468242fbeb9","sha256":"fdf3b4cc767d6d954a35e082047a49123acaf0e6173a23774fa46bd7ebee3dd6","sha512":"6b572687455fa56d0ab61a620d0e1b3cff07a51e198b986ddba5993551ed1dbf0f941811812dfa005ce79639479bb38c1f8518c5b59e442e9fc4347d93c103e1","ssdeep":"","tlshash":"32c08cc4a0c23e109a06682116af29e4a0244027704c5b138cd8ec482e221f4c233eac","size":148,"data":"","first_seen":"2023-09-24T22:56:46Z","last_seen":"2026-06-06T23:51:55.93209Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116341,"data":"","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-06-07T01:47:03.504429Z","times_seen":1545,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/3iOMgs09TklwNTYnBO.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7b59f0c68ffe139b00e7adead49363e0","sha1":"e9f784d4d7f187d5f22d2cf5c78f41d183db223a","sha256":"28af04203140fd9bcd034b9fd70d7f970e97c70da2a155bec2a33768cf83ab20","sha512":"a6820614b8a7ccaa677041c3e744fa95db6952324b29aa1c3b907077b1f615bfff8a79f2111816c36f6eaaa15ccf3620ee4539920d481aa19c017a66c90e5b79","ssdeep":"","tlshash":"9481a644b857d638c0fb58a8c1681051b2b46fccf0288b85f2fd392d03869f09bb9795","size":4066,"data":"","first_seen":"2026-06-06T01:45:51.884691Z","last_seen":"2026-06-06T23:51:55.910727Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9e76c89efc0bfb7bc505e5e37bc6b997","sha1":"e527143af060ee83de67e386f5709d6ea757e768","sha256":"1e2a84a2fef3fd681fa617f3958a4f544cfcca03a676790f2328e1bda4ee7c6e","sha512":"a6c8968570142d697f1a304850477bf3cca03ed0534553eab76464b25cb704fdabd3e941d9b90158f19b851a8111180fa1a15194c1340cafa8560954f55bad74","ssdeep":"","tlshash":"d5c08ccab0c36d10560a741450af24e49034402770881b02ccb8e8483e221b08233ed8","size":145,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-06-06T23:51:55.928772Z","times_seen":585,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e945cfacf91f6c0a27635339d8d37ff6","sha1":"4f09b7c9214edf2a190c29e64b54d2b6a69ca5c4","sha256":"9348a780a91a576eed3adcc0bae4d097a1761cbbe9fc3fb35029e60e604355c2","sha512":"2ac7ee471a447b022595f7e876b74c45bcbff208d1432e42faa5d3d152e034456910bd5fa6c25fc8a2cca51d32ea9f98b352c88465071c8f8e79d99b893f271d","ssdeep":"","tlshash":"515122193ad4b7298257b0b4987fcd49f520053a02e8d8484b1cd6fae82587dabb9cdd","size":2985,"data":"","first_seen":"2024-06-08T06:59:42Z","last_seen":"2026-06-06T23:51:55.922813Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee9d6d0192a874521fc25cc6de8ba3cc","sha1":"9aa349a2625d00b804ab30d7b54c5bca8c93c943","sha256":"a2cb6cb89d242b64030e56ca9bb71a8fc3d02bf398b4d990b1df9c63d7217834","sha512":"3246fab43b968ec30aad4c949ed5ce582fcd4fc1540ceec31951b5cc0fade3a4dbf427978e0139908d30d8c94fbcf87218c25d12d9b5da2c9dd9edf9153cee4c","ssdeep":"1536:kb3gziinU7a4oiLsXb2U/LuG0ch4Hl/HDTkzNZkVXK9:o3j9P+Lj4TY","tlshash":"3043d58cf7d9b02103973472497f541be33bba646c0bc650c526e5887dbc59aa237eac","size":59263,"data":"","first_seen":"2026-06-04T23:22:17.963341Z","last_seen":"2026-06-07T02:21:45.573869Z","times_seen":286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e72149d5788d2e19b81eb5b4326ca99b","sha1":"ebd0948e33ee83e0512279c2df196c3ca6d73666","sha256":"c020455a7c5657122ea2127097388a76ec3a072d82af198e8602507908f8ac0b","sha512":"b39d961538e111fc6edb680ed562152624fa7e6896edd356490f6ffe429ce50e336b74357ece513c02d544878b019e5e361604fd793d78987879cc6e4b12e080","ssdeep":"","tlshash":"d7c08cc4a0c27d105622681010af24e49028406674481b028c94d8482e220b08233e98","size":137,"data":"","first_seen":"2023-04-14T08:59:55Z","last_seen":"2026-06-06T23:51:55.931494Z","times_seen":1000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/ScwkR8IB9WDfhpH18i.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"93a23b2e287fc35e0b18703a46fa82a5","sha1":"b065ee6393a9c020630b2aea2ee74401a91dc214","sha256":"6fad31265d8a53c314ecaa07d3b5f86c18e9a739800181a2a7b55a742768f1a3","sha512":"5164f66ef40c41e7963867345c555538afd5ccc30a13685c53101c7e71a58db7d472c02eee661500047ab5b8f795c8275232c246670a7ea2e9a1d3e6ed48c38f","ssdeep":"","tlshash":"e5316489b41ecfbca4b70c39650bc056901c4fdef236d745b0e8461357d6c78622ab2c","size":1683,"data":"","first_seen":"2026-06-06T01:45:51.899665Z","last_seen":"2026-06-06T23:51:55.879564Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/3pcQdaRvwXC1o6YbPC.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7cd7d4af624aebd3dcf841f40526d8b7","sha1":"94f1e4d44c6d000d856c9361861edb4ce57717fc","sha256":"1d992fc6b3e1ce85aeaf57877c981aa95f98b59a3db5f519cddb6731ea462f37","sha512":"8158f3ec3df11aa08e4524cdc46daacf11efb6ca2a729f930f6c51c418ad452f75f1fe72680e393d9351dc7d7f259f71a4eacef4ae6dbea68a4b9b6b0f1bfae1","ssdeep":"","tlshash":"67c02b1e784d60f0865d0cfcc1174a7f53163e44332697f0a52d866f436a3261347f2a","size":157,"data":"","first_seen":"2026-06-06T01:45:51.893187Z","last_seen":"2026-06-06T23:51:55.839122Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad7e35095f9a2452e79ebcc25fb81251","sha1":"3533927767ca29d6e0b31695488ef232872758a7","sha256":"91ae7e639fdbf3e17c99d0a5181209e00b574191a993bf842a3ebf8836c80f6f","sha512":"b2f77b83a888c755bc0032d77272ab73f68fa24ae71de4d16427b1347eab3608698ebadb6b413d7cd7e0ee92ae78e5a1dd3f785d92ce3f3d1f5ffbda94cc7e3f","ssdeep":"","tlshash":"a4f09e1b1c47b1ae1bd6a5baa77f9d1b22112246319054137e0c80286fe083c5fe9e8c","size":508,"data":"","first_seen":"2024-06-08T06:59:42Z","last_seen":"2026-06-06T23:51:55.926764Z","times_seen":177,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/YZrxc9yUzoCbqU0IDe.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2a0ec4ed95a3fb1bb968411b1895cede","sha1":"96ce24af5c47745ba9bded2d2d7d2f0c0e1859e4","sha256":"ad578cf879340635d17bfcf5d5921c5f8569ac38a01951a3707645ea805a4d89","sha512":"9e1e32c1221094eeeab39cf569d98bc86fa6f3339707e2f73e233fcf12052e9a7a89dff2ef86f151bc4223c5c4294b1a1800dcc6681ed6ed949575e2482eddf1","ssdeep":"","tlshash":"46f0200bd81582bdc5eb1d082843306120483eacc73099c4e2f925b2d3c2976e46ff14","size":543,"data":"","first_seen":"2026-06-06T01:45:51.933718Z","last_seen":"2026-06-06T23:51:55.91495Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/Pvyr1Ls44eCQ2iGvVw.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"06d84ea9e0bc27a81f408f7ad329a1db","sha1":"fe7c465c8a115adfb54a95f9fa1ae97f8f74b1b6","sha256":"297218eb6b1bd1ddeea5b7e0940d17d22becf76fba086ac6170febed1f96923f","sha512":"b72d717783afcc3dbfe961168c818911a0b77942f0d9288c71a803913288efc0e0110168c6dbeccae97e95f210910775715352db510bfaa3fa416f06d59abee4","ssdeep":"384:fUHZBzU+Vr2NFDN3moLFj4prnnEFHJSR/xdbe3V5yeDrCUJ8fBHCT8PrS3U:SBzU+VQFDN3moLFj2rnnsHJShx5e3FD8","tlshash":"7c72f98679407032c7bb99c5d0d905a1672927c8f229c2d6f06e2d1b3619cb8f1fef1a","size":16130,"data":"","first_seen":"2026-06-06T01:45:51.942272Z","last_seen":"2026-06-06T23:51:55.898718Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bbfdbe498eceeae4b8955afded5953f2","sha1":"8c751893c399c81cfa90910f797e551c903f6f03","sha256":"58b8d2d45f5c38007fb9d52dbfa22b0e70b9fc6eed0dde5c96f3c600a54c387c","sha512":"2ca782e375b5aea7b15ef61611be19449f3ae3efe35807414b2efdce77c2250741e4efc0b626fe817be0c8ff1e221f8a3f95e7bd9306ff3ac87b930c510077c9","ssdeep":"","tlshash":"84c08cc4a0c22e105622641010af28e89034402674489b528c98ec4d3e230b09233eac","size":141,"data":"","first_seen":"2023-05-08T02:54:43Z","last_seen":"2026-06-07T00:18:16.399315Z","times_seen":343,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"585bd093398adcca9c32b34732c37bec","sha1":"96a392e95f918d9e3f1bdb9580e449d2efae29a3","sha256":"61650dcdc8a73394c151be14084ae4baaeca952889b4bb593be70922e4150d04","sha512":"0775cc084b6d8ed8f39b1e784110ccd26a3dce8b19412f1045b40bca5a8595b3f9393ca0ef88cbbe253c4ab172b45f881940d98167de52998a866041b9d1bd4b","ssdeep":"","tlshash":"f311aa2824ea160c8117ba95b1bfff0c762c612565e4dc0c814dd079182edbed6dd9af","size":1070,"data":"","first_seen":"2024-06-08T06:59:43Z","last_seen":"2026-06-06T23:51:55.92757Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"36f26a090abdcc337bfc430f7eba2abf","sha1":"bde4b3d8e5ebea671a9a85174cfb4058a4bf0adb","sha256":"217e71e9b0dbcd6bf49e06ed0c8570fc448a800192167db81cba4cbaefddce78","sha512":"a191f331612f086b236bcab8dc8340639cec8859afceb86edcaa7913e42165ff3d184a5a5f4bac7ea93f59aeea3c76e505c456f9f5da206347076658fc271a87","ssdeep":"","tlshash":"12c08cc8a0c72e101a12655015bf24e4a024402a70489b038c94d8482e230b09233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-06T23:51:55.924183Z","times_seen":1568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/A5N3lpU50aaSaCkf-j.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e7b9cdf9bfea7d435c1b711f41a0b86a","sha1":"daf731157da7368c7cf0a0b6e121ee6ab9c4d814","sha256":"4b774f93d91c08b7f26767201fb4939786587724b4b21fe21b4f75f54bb43525","sha512":"47eff903b3ac39d4420e25bc71a54ca6fc7c787f3b3e6dc0cdfd54285e24c953e36d768265358085be849eac91a52601e80fe80e29293810cb03f7e47b7e9eb1","ssdeep":"192:eISXv41iP+N2sNONzDnVTDQQezJs+FNQLO4evdNLmK0xoHpKkY:eI71NZwBBsQEs+FhZ1cSTY","tlshash":"f6028ee71401be7e57e283bca66c34145c77147f11fd223a2e4fd246b589122b18d4ab","size":8259,"data":"","first_seen":"2026-06-06T01:45:51.869353Z","last_seen":"2026-06-06T23:51:55.853521Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de3ed6f62fa4508e69491bd89eb274b5","sha1":"eb8c50c4a1b5641abcb034fd7f88a95d15ed919e","sha256":"909705f246c8ead542b59e1f02453e6769864dcea4c1cfe24b8818a3a98ec0a3","sha512":"e7891d59adb2ea08b3810e31000d3b5df108358dc50347cd0bbad5fa3bfff24b170e934cbbce1bebc9baf1a352e9a1d34afda920db85c6f12e9759649fc03295","ssdeep":"","tlshash":"2ef022d91997593006eb11ff2b9e301060304003e908ffa0346f05046fed72ae7e1be8","size":618,"data":"","first_seen":"2024-12-08T21:22:12.696799Z","last_seen":"2026-06-06T23:51:55.932654Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6ac9071d9932331d6f13c28662df3eaa","sha1":"f6eb1baa0bd1ae6f59ae6aceb867f897511aeee1","sha256":"b4c3e0db43ddfac91e82f4f458144da6e4066d57aa41fed04d86cd9b3c0e368d","sha512":"cefe8e65fa5d8690b53f96ad56320e72dba887c3ccd4df0d4eb9000a5bc903b77d1b7ae8b1ad7ec25ec0443e8fd41327e3deb9238f38884b08549579c918e3ca","ssdeep":"","tlshash":"25c08cc4a0c22d201606682014af24e490244026704c2b028dd4d8492ea34b48233e98","size":140,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-06T23:51:55.938756Z","times_seen":386,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/swiper.97D0xcXv.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"82975d67eb53caecb90681ed0c1b2f69","sha1":"6adad631ec9645ddd33fddebf6d1f751f85ec722","sha256":"40d5188099366d2198d6808424577f236659c1a01d412d30d6e9ff9fb5cb014d","sha512":"af56e91504aafabaef51cc89496c2706f6dcb72113c4302d87fa2a85b9071965bd32eaeb15ebf924d1d6df2070015f7b899c4b0fb0a6c88a7f89e4a014ea978e","ssdeep":"3072:X72LtwN8TgGriiXOlYYgFCPKE3WVcDhPU0s2usyko:XaRw8TgGripiFCPn3WVcDhPU0s2Eko","tlshash":"1af33a997250b13242fb19e742768111b37909497809d4e8b1ad9deb2d3b84812ffffe","size":168708,"data":"","first_seen":"2026-05-02T20:23:32.665218Z","last_seen":"2026-06-06T23:51:55.845362Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/ufkzU1PfOqCT_Gm_kV.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"82b66b034d3d0f6429160d0b2986cf61","sha1":"964670b2b3cf1919e874055c2258118934ea932f","sha256":"0d3cd10cb264b16c24c7a98ddf4143f79e346b43042de8a1bde6e9c8d48fa7a8","sha512":"fde6c5744e0f5b700f89f5f17c728b03632d1427fc55892891d5fc8a8591363e06d8c0d4bd9120370656804695ea86064660ef7d6c7b31791769a4225c0c44f2","ssdeep":"","tlshash":"490189247edcf6e2d26b086855d15349db3063ac58d400566e6783700fedbf3c86bb00","size":746,"data":"","first_seen":"2026-06-06T01:45:51.926999Z","last_seen":"2026-06-06T23:51:55.874707Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2742162309ecb25408f0bdbd2e0e03d8","sha1":"0f732f495c154daa3c97fea9d422f8438f70ba4c","sha256":"c6ad747cb1db54d087ee3909f26e9ae3f0d6f66aab6245e48ad5d8168fce0fd2","sha512":"6f305b56fa56b526403d9c59de6cadadc7a428301ae45fc2a74de6a695d3752358d9fdeb04ccba88779aaab6a8327602e287ab5000a79dec03e7bc574fd8e41a","ssdeep":"","tlshash":"57c08cd8a1e22e005a0265a410bf38e89034542674486b039dd4d8593e635b0c233e98","size":150,"data":"","first_seen":"2024-03-11T20:01:51Z","last_seen":"2026-06-06T23:51:55.919841Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/isXIhRwtk4DphTiuT0.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1d9f0b734cf3c6c762e650328de80c4f","sha1":"04034dc1f810d318c27ce473cb113d8db2e39f98","sha256":"ee8a90aff1ef584419df58d62874cceaae0fef5e2fd532ca7a3c86455278f683","sha512":"baf1dcdfd1c36907288de41a618d7c498dcca1fcb8247890034a55b15839f7348968d079b622e00bb083d7e3f7facf11d0142f1300e1c1abf745b6e248f16785","ssdeep":"","tlshash":"ed41746cf511dabca277467858120050220c1fdf9164ded4e1ae1f225ad6cf4b55af78","size":2252,"data":"","first_seen":"2026-06-06T01:45:51.859727Z","last_seen":"2026-06-06T23:51:55.837341Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/ZTY7rClvtTCs3O_Z4T.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"24648e937b6691c7ccc79022d9e132c5","sha1":"8da807daecccbc646a79a5ef52c366fb1420752a","sha256":"0d39e8a49c336cda2e7d1f9d37f9633175fd2045c6a5cb2dd5a0fe6e29aee634","sha512":"a54164b377927f87772f1c73893148bbe0d3ff8228bcd6c33a6043942cc57a091fac086370a80ad09bdf953517fb929f839568ae7e002ce68b64e0130c998cad","ssdeep":"","tlshash":"b1312191f6b9d074937a58e1c03d1610e1591f447159f9ead4ff0d826e8284af93ba3c","size":1810,"data":"","first_seen":"2026-06-06T01:45:51.849661Z","last_seen":"2026-06-06T23:51:55.914172Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/aJaUfz9iiXBWEgg-N0.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1a7a3c81121d1a2abc6d2402e0d12f34","sha1":"6d63bd481ee2040bc0f89452c971f10ddecab02e","sha256":"b2572512885ec45e7f1fc2e4cfaa07fd581da96d47315bab87b5dd9142ed4113","sha512":"47e678c5d62e0af707dd2641db9269133aa8b00294317c194100c7bafbde361f49dc11671ccf71083357b751e5ae706bf554aa3835794467bf94d0e3cb180fd2","ssdeep":"","tlshash":"61f05c0eb469d17c41fa1c6d4840014c17724f9422d161cdb13f1dd84a34ce2d6a6c29","size":459,"data":"","first_seen":"2026-06-06T01:45:51.900794Z","last_seen":"2026-06-06T23:51:55.835385Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"31710fe7cddf311e305275f8ff52db45","sha1":"d1945af6ec6eff8cd251cba44a0ba5a58eb5016e","sha256":"908b61cff8d644be7319777685a8e62a75d4849fcead5febb760360f6d6189c5","sha512":"c363a8e40a97490124c2b3cafa841972ef1b5864e2d6d08bfcd7be5d78640eb8b9ba4363e262b03440b6bbd7006dc1cfff9492c1b18d97d86d523e51fe18cbdc","ssdeep":"","tlshash":"76c08cc8a0d26d002b02b49014bf24e89034502770481b429c94e8482e621b08337e98","size":144,"data":"","first_seen":"2023-09-24T22:56:46Z","last_seen":"2026-06-06T23:51:55.935641Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"df5e904e2a419fd848b94f0d8a9c5338","sha1":"ded3da98e8f557e3702034442c0527b9b6f2939d","sha256":"f46e53c31226b8a14d07eb98f71e7e9a331f5c34b36be4b50c4b23c4ad71796c","sha512":"c6afea57dbf39cd7d34d2ea55d4ecaab8c57547ca2ac0320e45e3e39d6b2e0388df4247c91746749c1f4d57539ec42ff0576a2abf6a9f090adc79fefee60c97c","ssdeep":"","tlshash":"90e0c02a18ea18b99757a2b6313ffc053102300d626883727a4cc505ef91d7f87a4f8c","size":388,"data":"","first_seen":"2024-08-25T20:57:00Z","last_seen":"2026-06-06T23:51:55.933246Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/i1hPDjnSZZBgwtDQQg.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2ea53b6f4b4df73dfe1f831edb7386b8","sha1":"74cd317b45a96b1fabaa2386d24383104b55e058","sha256":"964effef9654dc72f572661227d6b1a960a3d53adefd3e938c3babba394af2ff","sha512":"138696d04e4f205a5f11ea8bc212c4f2d41d68f51c3da973cd5ec54b5804d3b9ef26a3d0d485c0550bee3384ed9eb78165f5bffbcc1e4678dcb65ec3f4643723","ssdeep":"","tlshash":"31d02b04898843a82db1106a0b06a7b021b6015c4f74c2f4961e4e30cf1930a1e4ba11","size":246,"data":"","first_seen":"2026-06-06T01:45:51.930827Z","last_seen":"2026-06-06T23:51:55.873697Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/6igAjaRNr4DD2YpfyN.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dff4fc2dd2d973f4a476c2b275af6b88","sha1":"faf31cbd9dc8796fe8b19292674f621e38b1a5a5","sha256":"2b90f1659d60d2ae558af0a811ea86e5ce24c3ba87223e6a678dc597a4450da0","sha512":"d1e451d295990fe4f8548ff1dcc62d6d5bf080ee438da75d2d829bdba6debb5e5d9f668db14526a477d58e811249909deb734c039cfc239aafdb6efc3f057e4a","ssdeep":"","tlshash":"07b01203468802e41475409b0b15f7f41566010c1b2442e9700d0b16c7262898d0fa10","size":92,"data":"","first_seen":"2026-06-06T01:45:51.907335Z","last_seen":"2026-06-06T23:51:55.891281Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"cc59b3e522df2a35772f512170b54f01","sha1":"bcbf33cbb4f8fea345397317d97969e87b0db19b","sha256":"8751e84fc847cbb6aa94df313f61d486a70c4046d239d50f327668b902a8a229","sha512":"42ce557c91fd84513e62de36c70339417ba33db2818fe760e49dc811a2cced93adbf09fe30b8667f923fbfe6059fd5061118d0e8ac157e339ad4510902493b6e","ssdeep":"","tlshash":"cec08ce8b1c32d106a66642114bf39e490244427b08c2b468ce4ec483e230f08233eec","size":153,"data":"","first_seen":"2023-09-24T22:56:46Z","last_seen":"2026-06-06T23:51:55.926175Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e7e2057b0723e91ee0b2d3cc4b39db03","sha1":"302b060f00f3d1cd56a6ec1b3034320657e07eb3","sha256":"23622be08ff59b4e6436cea75a654feb30e9e052cd064869a2f19f4892ab0f47","sha512":"54a18893c5eeabd3a262e633079532ef0e23e5010a639eb4be72090f490e21883e87fcfaaaaed3d760a0931e6a3dc6f9bb1614226e5278c547ca7beb84a3f60a","ssdeep":"","tlshash":"47c08cd5a1d63d105b12a69190ef35e89034502774482f639dd8d84c2f631b0823beec","size":160,"data":"","first_seen":"2023-09-24T22:56:46Z","last_seen":"2026-06-06T23:51:55.920461Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/dlovnVzDC84M3VPCD8.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9ea69441deb48febdc18279c54436e7","sha1":"bd26fc9dc60326324fd84b880b6705db016e2e8e","sha256":"7da70c5ef3a5ecb496522b3be7b516dc1b6e127756f264c9b5ee43f81a9a5c6c","sha512":"3a5ecc95bf47e6e22399e227995f10cc90510379cee956b240e92f6588d9d20a7c873e7c56656e7984c590f0405f3442d841349b325c270c98665b1f92c066d6","ssdeep":"3072:WD7VOnZY5kWoH6J+2JfnI2o8Xck/7CrmxUxpMIt2kN3nT8Q5f4a:I7VOnm5AH6J+2Jfn4531l","tlshash":"b8344b51640beb3ee4a3588d68491800380d4feed51d9d66f2fcb627abc6cb0573e768","size":244993,"data":"","first_seen":"2026-06-06T01:45:51.938433Z","last_seen":"2026-06-06T23:51:55.855015Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"92e81ef4d7ff796a20b80fcb8ecafb14","sha1":"3858157355200e83aa100cf5f214e911f10693ba","sha256":"d3a581bf91a70a8ca524ae1c262c4038b94530ea30d0464f6acecb58018931e4","sha512":"a23b0cc95270d3cd86f1ba4cd9605d791f61bc593f4570b1787e9cb84cea444ee4c8c3bd311fa45748451d191ac8b9c3736792935dfac95d25ef292b62f83983","ssdeep":"","tlshash":"1bc08cd8a0c22d105612a81211af29e490244026704c2b028c98e8483e230f08233eac","size":141,"data":"","first_seen":"2023-09-24T22:56:45Z","last_seen":"2026-06-06T23:51:55.92533Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ce2a497ed52d60984017d6c50050212f","sha1":"e5061d81325e8091799c99881264070b9ac648df","sha256":"87fe3ff7d869ecf3e942e21576e5622bea21282217409f77a14020c2160da30f","sha512":"88dbc2af0f09af280efe0b5ef7e7ba913e866c50c75aae5916ef6ffccb16a7a55ffc7b6c8158d18d17636845b7e139c2afd21b3dc1f030de36bf63136c7aa88d","ssdeep":"","tlshash":"34c08cc4a1c33d001a06661120bf39e4a0248026704c5b128cd4e8492e230b88237e9c","size":145,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-06-06T23:51:55.922116Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd1bd11fd11651336c660ae4dcaffe70","sha1":"247c11c7aa0d5767918f2cc20c26f1e7aecb77db","sha256":"77bc3df32a0c1eb2d90672990d2c97863055bf9ee0ab062a59a0e235e428a122","sha512":"2807830aaf907a83d221d0da285768e897ff63517947cb2a3979f5e1fbda93e80abf24deb0b7692cb8874b8cad0be6acfc1c1f608a5835474ce7dfaf0a831353","ssdeep":"","tlshash":"6b01eb230cd910af6f2710bd2b3faa1236b01113144ac420fc0e8720af20e7c1724acc","size":700,"data":"","first_seen":"2025-11-11T13:02:28.956822Z","last_seen":"2026-06-06T23:51:55.936813Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/xNR8LKQ3u1CcN_uO6B.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"282ac45b84992114a8cec21a64aa41d6","sha1":"285ab1bec1f4a6793875b98f6a2d8442b8045614","sha256":"ebab847469d2b4f8e3fa7bafb6135c5132d2bda9ee42bcfd15edf18fb844135c","sha512":"d7f27cb5479ceddb9bf87f9264bc2694a695d72d4a65b476b7bf7a7c3510a728aba256cf424573e79e5ed830668165e5f0bae188344709d2a2dc648a97569fa3","ssdeep":"768:YLNVmWmFp351iBFmbI5qUVhHvLKDgeL0m:YT7mdQpWwm","tlshash":"bcc20b3060508329fd94b0651d84ac466d880ba9da939de3f1fe8d87d7c29b7eda43dc","size":27222,"data":"","first_seen":"2026-06-06T01:45:51.937177Z","last_seen":"2026-06-06T23:51:55.852917Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/yWdBPusINArYcHO7px.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2b593e94ed32cc7aeb47c7593e66a872","sha1":"b1df1a84d07b84d3027a0c1e99d99f2a12c2ba2c","sha256":"5ebd8352ace662cdfc522ade70889dcbb0b1ecc34965a9ccd744dee78d58e719","sha512":"4d5bce45e64125b9b88d2738cbc79441683280ec73f79a2c040fa9fc2fd2d9d02c7c72504a4744b7a74155d0de1335f3a3f813e583088e6d45c4b2cc8d7c70c0","ssdeep":"","tlshash":"34c08c47b44682e0921a0c88011a8d821e250e9823469fc080496ea80a710a8ca8ba2d","size":165,"data":"","first_seen":"2026-06-06T01:45:51.924309Z","last_seen":"2026-06-06T23:51:55.901102Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/If3LiozMChB_A1xBdJ.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","size":27,"data":"","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-06-06T23:51:55.909505Z","times_seen":727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/guB0uAjfk1tLqqJsUO.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a7693b5d4afe2e608bc9c344d31a8e6f","sha1":"166326c8c39400d7abbf07df9f86f3343ce7f7fc","sha256":"82ed0de5fa389f4aaa57ffb61371606340cfd8643cc04e599f7d3436d0b51db7","sha512":"7359bdb90c7240904921e261e655ff5cb0b52e15f223614b26198717e59e6d45f36c3ca829eef066b2f5e0bb61f5ba7c73ab0ab46965545bfda0f67eee45703b","ssdeep":"","tlshash":"b2012502b47470d0b3bb0c81450509c166724b3a2742c0e0b51c4e83e67fea2c2f7f69","size":804,"data":"","first_seen":"2026-06-06T01:45:51.895769Z","last_seen":"2026-06-06T23:51:55.875355Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-07T01:31:45.126712Z","times_seen":5592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7144169280a69b1c180a70c7fb7c5047","sha1":"286b077ac1ddc843cb5a34c0310fec82d7628167","sha256":"0860f78a352e55f64ab8fa11ce266c6b60f40f4ee95040204fc70884babac6e9","sha512":"2cca64caa2a5ff4fdc390e7127fd89645a0e80135214f066e068f14d9726fdc0965fa5a9e79d7222283d8e0e12c90fd504367f81ae5fb580e3c1bc4c84a12f68","ssdeep":"","tlshash":"edc02bc5b0c33d101602641010bf38e490344027704c1b43ccd4dc583e230f08233edc","size":135,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-06-07T00:27:53.723157Z","times_seen":485,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/cE6Md7SFfkBLZ46nNZ.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"20577e0d255c8f5d4f49a04050456ec4","sha1":"1c12ad5c045e46c1f0b4c6b4699604b3211d7af7","sha256":"2920902c3143a0eacd59b2988b3768eef16e087e02a8fec4e6441ca8b8ba4cdd","sha512":"840c389dff5de85147d903abb669e694d3e34ccec0879b31fe8fe55431eb3e798d1468cc58d3947770d42b305713784c6129eb0f735dce1d1c802497ad24536c","ssdeep":"","tlshash":"63516299f6a6503d8b7328f532e420c5561e13a0efb651ed501e2b004ba7c23bafc939","size":2548,"data":"","first_seen":"2026-06-06T01:45:51.932614Z","last_seen":"2026-06-06T23:51:55.883086Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1ca49f0e439cf34669924908e59b2897","sha1":"efea6ef6bd12f3ded99d07b429c6af21c23ed826","sha256":"9f9ee6011e8f88513c2761906180f430478c9d9835d4e74a211cafd3c79b955e","sha512":"f5dfd73abfc4c47819a1c10e68b974d2253a67fd9fb113e510809ee5ea650d5dd1f003dedcd6f88235e4e5b696f28c5e2f18526e794579f3b9f5a1d7db17bb21","ssdeep":"","tlshash":"fec08cc4b0c22d102602a91010af24e49024406770481b168c94dc882e224b09237e98","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-06T23:51:55.92819Z","times_seen":534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0ed7511cd3b7281935b501081af2b243","sha1":"7ce7c1685cb501be190aabcf6be8dd99cfbf124e","sha256":"4247c7e1fc2e29b0428ce5ddb331bde55d7a2240cdfe739e78d856349a36e99b","sha512":"792f1b064e558413e24df0cdf3b12c29725a76345b048c7b3ee9b3745d708b482d7b4fefd118be667b4a4a8a6976784b63847f7f225d44b9045c73cbc8bd2ca1","ssdeep":"","tlshash":"9bc08cc4a0c63d002603655110af24e4a0244026704c1b22add4e8483e230b08233e9c","size":141,"data":"","first_seen":"2023-09-24T22:56:46Z","last_seen":"2026-06-06T23:51:55.938194Z","times_seen":376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/#/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0a135a3820c44612d285347e945db1a0","sha1":"c751ab64ae029f5969e555a5dbec7dc15eb8f339","sha256":"6a02a962e9797eb8838be4ec5b3dbd47c5c6ced0fdee45ff8b242e92130a9d61","sha512":"92028e04908a6c3cdf03c75cf98c4678eb7bfbbdd11939716bad337599380d34293b296b7a059358cbdd3632a32b9f6b64f6768256fd20aa2efb83ff15d3a65f","ssdeep":"","tlshash":"6ec08cc4a0c23d001a22641068af34f4a034406ab14c1b528e94d8583e230f09233f98","size":147,"data":"","first_seen":"2023-09-24T22:56:46Z","last_seen":"2026-06-07T00:27:53.727274Z","times_seen":996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/cx4j0d9lRPD5f4ws8Z.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d0abb7d0c9f1304bb4bce4e6c9fc6948","sha1":"faf8e46d930003ce97fc01d10d9043551c51f629","sha256":"6c7ae12d7856e44a9e48909ab24472f119e77bd4186998859742b2d88b895248","sha512":"3e96f8d9424badbf70da381688f5ce7820201df31dd42b4c493cbf10f1f0be95f21b211c81b192deb2c01c19a4df5cddea6e394f9bc58c02b0f906ce7f1c5e6e","ssdeep":"192:/DgmNPNXNXNGNxNzNDN1NXBbnBMNmDPA/IfOSqITWnlHO5laVPK:/DgmJRBQ/JxDHyNwPA/I/9TWdOe1K","tlshash":"ee2240a6df4fea0b472104c43b27ba9daf5e2bcdb0ee4583c3499c6c5e0ad546606970","size":10869,"data":"","first_seen":"2026-06-06T01:45:51.852278Z","last_seen":"2026-06-06T23:51:55.901993Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/HOCBFsKgUHNm6zEJV3.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8970c08de6353f7a6b6ed8063cc6b0a6","sha1":"dd6eb792be074a9503fd4058a5172668f8ad019d","sha256":"d1b35be946ad120bc99e7a33e36f4aeec4b6f740cea97e71d2fa0c0dbdc54c2a","sha512":"46123ff4ce62083823d51be26d7a6242675e0208adaab1f81e6dcc149547560d86dee22ad76a5e3c579a90b41bafdfea33fce71325dadfcdf8d4216b3543e347","ssdeep":"12288:WytYpB6LrebcE7J2kxpVo2QxCqBjsa7AhhGyAcRWvj9SfnnvRIhfGpRV9SIIYJUs:nY6nE7UkAB/SkG","tlshash":"a97532282a1bf744e419c0dbf9373c84d59de68aa00754d16f790bb31be2792ea9cd13","size":1594182,"data":"","first_seen":"2026-06-06T01:45:51.972008Z","last_seen":"2026-06-06T23:51:55.934272Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/ZiGGOXcg40D39Q8g-a.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8dce6c03eeb476cb81c0f5f7e99db834","sha1":"dabb0c11bb0d7767c01e7e2cb1c30792f76d90ac","sha256":"d15275965e55c9756498535b6657d3f5ece16c1f4eb843b83334b5517bead9ba","sha512":"8805bd650fbb812111188138eab078f8f8c0d609ea9a442d801ffdeef0ff4aa38cfe0f9b29ca42e04e7815a7e682effc738089a2db5a4eef3b82196e75f5260a","ssdeep":"","tlshash":"a461e829fa88503993e3b17414e14cd141365f1028c2e6efd2570c84273ab90b3dfc67","size":3374,"data":"","first_seen":"2026-06-06T01:45:51.906236Z","last_seen":"2026-06-06T23:51:55.850474Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"20268-tg.cc/js/isXIhRwtk4DphTiuT0.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/isXIhRwtk4DphTiuT0.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/dlovnVzDC84M3VPCD8.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-8cc\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nKze7IL%2FaQ7c7gHa2rR1WIvJcLV8d36WVKmX9FAT0aiqADBQKsroNNgs1eHnBszIorciiXVf9ckeCIYgNFnjHYET4H94nk6u9B2AR3fBxsuoPRskr2mvnYVHLZ3%2FGg%3D%3D\"}]}\r\ncf-ray: a07b4a5b0c67b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2252,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2251)","md5":"1d9f0b734cf3c6c762e650328de80c4f","sha1":"04034dc1f810d318c27ce473cb113d8db2e39f98","sha256":"ee8a90aff1ef584419df58d62874cceaae0fef5e2fd532ca7a3c86455278f683","sha512":"baf1dcdfd1c36907288de41a618d7c498dcca1fcb8247890034a55b15839f7348968d079b622e00bb083d7e3f7facf11d0142f1300e1c1abf745b6e248f16785","ssdeep":"","tlshash":"ed41746cf511dabca277467858120050220c1fdf9164ded4e1ae1f225ad6cf4b55af78","first_seen":"2026-06-06T01:45:51.859727Z","last_seen":"2026-06-06T23:51:55.837341Z","times_seen":3,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/ufkzU1PfOqCT_Gm_kV.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/ufkzU1PfOqCT_Gm_kV.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-2ea\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7AOENootq8aUZmVz77efXplU4U3Virlg5AOqYTdlGVViQN0RloKUa47dCuDqvV%2BKjPZGC1qUqdB2gqRqR0avfahhzuknfR76AjSORxBVXC3%2B6277gEsdnE2QKWzcfw%3D%3D\"}]}\r\nage: 0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a07b4a5c6ca1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":746,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"82b66b034d3d0f6429160d0b2986cf61","sha1":"964670b2b3cf1919e874055c2258118934ea932f","sha256":"0d3cd10cb264b16c24c7a98ddf4143f79e346b43042de8a1bde6e9c8d48fa7a8","sha512":"fde6c5744e0f5b700f89f5f17c728b03632d1427fc55892891d5fc8a8591363e06d8c0d4bd9120370656804695ea86064660ef7d6c7b31791769a4225c0c44f2","ssdeep":"","tlshash":"490189247edcf6e2d26b086855d15349db3063ac58d400566e6783700fedbf3c86bb00","first_seen":"2026-06-06T01:45:51.926999Z","last_seen":"2026-06-06T23:51:55.874707Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/6igAjaRNr4DD2YpfyN.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/6igAjaRNr4DD2YpfyN.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-5c\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NeLoYOE0lBG77RhZgKpvCm%2FoSgR%2BT%2B4SBHk7b%2FjNm7YMk532ZYWlOvo9zh1sdgvYjoB2nHfEcOteRjO%2BNslZGpUC%2B5xWS%2Bi8vgIpOTqrPdFIux6nV0GydV1KGTquug%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\ncf-ray: a07b4a58ac19b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"dff4fc2dd2d973f4a476c2b275af6b88","sha1":"faf31cbd9dc8796fe8b19292674f621e38b1a5a5","sha256":"2b90f1659d60d2ae558af0a811ea86e5ce24c3ba87223e6a678dc597a4450da0","sha512":"d1e451d295990fe4f8548ff1dcc62d6d5bf080ee438da75d2d829bdba6debb5e5d9f668db14526a477d58e811249909deb734c039cfc239aafdb6efc3f057e4a","ssdeep":"","tlshash":"07b01203468802e41475409b0b15f7f41566010c1b2442e9700d0b16c7262898d0fa10","first_seen":"2026-06-06T01:45:51.907335Z","last_seen":"2026-06-06T23:51:55.891281Z","times_seen":3,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/xNR8LKQ3u1CcN_uO6B.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/xNR8LKQ3u1CcN_uO6B.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-6a56\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FWjVtYMwhUnLWz9kqq14bBj6ScmYiy9buUok99L1DOMAWcvOpyW%2BePMhqBZDt200IpLsN%2FDldvJaH81CJ0xTOIYW1PI5m3%2F753xp1n3MSAywi3Ybu5ODX%2FlG2qRL5Q%3D%3D\"}]}\r\ncf-ray: a07b4a588c03b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27222,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27221)","md5":"282ac45b84992114a8cec21a64aa41d6","sha1":"285ab1bec1f4a6793875b98f6a2d8442b8045614","sha256":"ebab847469d2b4f8e3fa7bafb6135c5132d2bda9ee42bcfd15edf18fb844135c","sha512":"d7f27cb5479ceddb9bf87f9264bc2694a695d72d4a65b476b7bf7a7c3510a728aba256cf424573e79e5ed830668165e5f0bae188344709d2a2dc648a97569fa3","ssdeep":"768:YLNVmWmFp351iBFmbI5qUVhHvLKDgeL0m:YT7mdQpWwm","tlshash":"bcc20b3060508329fd94b0651d84ac466d880ba9da939de3f1fe8d87d7c29b7eda43dc","first_seen":"2026-06-06T01:45:51.937177Z","last_seen":"2026-06-06T23:51:55.852917Z","times_seen":3,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/A5N3lpU50aaSaCkf-j.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/A5N3lpU50aaSaCkf-j.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-2043\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2smvdnAHyQZqFX0J%2BPOhigjTXGiGKssyNzqzYWJ2C1Z9bUuBNo%2BaRIDCvCFqqmhenHAFkkStvKA%2F6ZS%2BiKplgODr2TFs1%2FjgVKKYkv4ZPb9BwZX%2Bhln7FM0SIJzaJw%3D%3D\"}]}\r\ncf-ray: a07b4a589c0eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8259,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8258)","md5":"e7b9cdf9bfea7d435c1b711f41a0b86a","sha1":"daf731157da7368c7cf0a0b6e121ee6ab9c4d814","sha256":"4b774f93d91c08b7f26767201fb4939786587724b4b21fe21b4f75f54bb43525","sha512":"47eff903b3ac39d4420e25bc71a54ca6fc7c787f3b3e6dc0cdfd54285e24c953e36d768265358085be849eac91a52601e80fe80e29293810cb03f7e47b7e9eb1","ssdeep":"192:eISXv41iP+N2sNONzDnVTDQQezJs+FNQLO4evdNLmK0xoHpKkY:eI71NZwBBsQEs+FhZ1cSTY","tlshash":"f6028ee71401be7e57e283bca66c34145c77147f11fd223a2e4fd246b589122b18d4ab","first_seen":"2026-06-06T01:45:51.869353Z","last_seen":"2026-06-06T23:51:55.853521Z","times_seen":3,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.20268-tg.cc/upload/img/6a203c274fa5.webp","fqdn":"api.20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /upload/img/6a203c274fa5.webp HTTP/1.1\r\nHost: api.20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:25 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 03 Jun 2026 14:37:27 GMT\r\npriority: u=4,i=?0\r\netag: \"6a203c27-2647a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1gUPMQpUwrUjf2AKhoZ4S3CqVS8v0IKZB%2BnGCm6TQ9nDlakr6UoKzmn7Wsy%2BxSz2LksChetNq16mKN%2F%2FPW8xo%2FjmYZbu7fTR2ZlB0PqIy%2F3Rd1g7%2FSiY3bBl1pyJwksQz%2Fw%3D\"}]}\r\ncontent-length: 156794\r\ncf-ray: a07b4a616d2bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156794,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 931x339, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"10abcf9549b53e819afd9a3045c49082","sha1":"ac07cc2ad5d0b02faafbd4d7c3e5d67b026e7ba8","sha256":"846ee35712903ce899ff6e97ca43d3477b685194d5e2fb4b1117ad32fa6c4b2f","sha512":"5e93cbcd5f54201487711280308e004428c01c2191bdd8a0b411f51b9343a5a5a7eeb0cd1d3bb01ef659283d63f826ee55a7e047ecfe91ec76c1f82cbe62d86b","ssdeep":"3072:KteDTCPyEbevzLyfHKSHtgzLSd/HZRbHO/GLf2RMOhTei2YfAi74VjeplrVe6P:KtRwvzmCSHtg/KRbu/GLW0i2K7rzVh","tlshash":"9ee322bfb8a32b61d543ac1577892702b2c78f8d14457d868fd72a6ef16638e35a01c4","first_seen":"2026-06-06T01:45:51.874331Z","last_seen":"2026-06-06T23:51:55.887987Z","times_seen":3,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":310,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/aJaUfz9iiXBWEgg-N0.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/aJaUfz9iiXBWEgg-N0.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-1cb\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7W1ChNSahm8gVTZnbJ8zgQ%2FSS0Mc0i3rRT5GRnxslw%2BimG3y8PP1GqUefgZzS%2B4z6M8D8dMctOB10jgpDFYnLeyJvlBhz8fJZRb0V0H95JF8VQADmOqZkgW7nmCrAA%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\ncf-ray: a07b4a58ac18b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":459,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (458)","md5":"1a7a3c81121d1a2abc6d2402e0d12f34","sha1":"6d63bd481ee2040bc0f89452c971f10ddecab02e","sha256":"b2572512885ec45e7f1fc2e4cfaa07fd581da96d47315bab87b5dd9142ed4113","sha512":"47e678c5d62e0af707dd2641db9269133aa8b00294317c194100c7bafbde361f49dc11671ccf71083357b751e5ae706bf554aa3835794467bf94d0e3cb180fd2","ssdeep":"","tlshash":"61f05c0eb469d17c41fa1c6d4840014c17724f9422d161cdb13f1dd84a34ce2d6a6c29","first_seen":"2026-06-06T01:45:51.900794Z","last_seen":"2026-06-06T23:51:55.835385Z","times_seen":3,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/X3JQMLj6cumcmGumKt.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/X3JQMLj6cumcmGumKt.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-3a64\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EXguNCkFG%2BaXXJbKMQKcVwuskktwxl84GaxruqnuqUvVRWYPV8bupEVx%2F05KFVZJnyKoG24FnavCWBXoIyv8LD7A7dr7EJm4z1abGtaUSZBNJnQESMHvKmZxw2c%2BJA%3D%3D\"}]}\r\ncf-ray: a07b4a58bc1ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14948,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14947)","md5":"4b6718259675abb2f90e9ec59af03db1","sha1":"28395422bbfaad9cf49d528d3b89ad58f82c657e","sha256":"7bca131e84bd9ec5c53ac64ca15310b0702dfb83c93b89eefdcba8e64d52cfdd","sha512":"ecad0daa68620392005d9e048d51683eb6e4ead47b84cd3a656f28a65808d95db30462278e88b18343c14bf722cfb5bc88123da44a9962a6e4967a35b729ba0c","ssdeep":"192:oQ5eIDNnwkmJJexKjWHovWEj2V5IrscoNtBrNMaO7K+UawhZC7Jfk25mXX1Nkauf:oQ5HnQvhjQeWyFCrqaO7zUaP7Jf41ulN","tlshash":"d1629eb73b98d67acb702cf8600a55f2ecd6586f6ff54d84d89800a487e0c90cd5e782","first_seen":"2026-06-06T01:45:51.86203Z","last_seen":"2026-06-06T23:51:55.896234Z","times_seen":3,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/assets/5nq3uZduRkDaGohe6n.png","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /assets/5nq3uZduRkDaGohe6n.png HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/assets/PbTJ7UGDGhDY97Ofvr.css\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:24 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\netag: \"6a2034c5-14a6\"\r\nexpires: Mon, 06 Jul 2026 01:45:19 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 79204\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0JG2jDpMj5T8ureUQtVMKFBwZX%2BYNrwwjjv%2F5aXUy5Je9wWxvcqjBDT47Voj69fBGHXJwz2HSghxAZ6IwYqkFVMAkaOtKh2UwI0eL0uSCl5xlARjpQNkOo3BBc%2FFjw%3D%3D\"}]}\r\ncontent-length: 5286\r\ncf-ray: a07b4a5d6cbdb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5286,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 341 x 151, 8-bit colormap, non-interlaced","md5":"2a0fcaac4df5a0703f3932110aba5ef7","sha1":"c8ec57b7f92c173b7c575a88aff0ab66ba8ed798","sha256":"1963bcdf76c923521e340bffcbb00bde2310203239c77575d9f253e8c149dc06","sha512":"765a032894133dedd6983dcf36f7f7984c7a7b050df3c04c85cc4c6de534a192751c6aa50af706b4feb24e2e2a78ad1e118c359017fb5825920060e719c14e47","ssdeep":"96:BP4leSwkbURlcjrjWvA+fVmh5gEWtT+RUEI6z3lgRc3ZGxnkGt/lZVaqKKU2dUD:BPgeSwkucjrjxEmxWtT+yEM+4kGt/YKU","tlshash":"e3b18dc6cc9abc2062abff4434c77645831e1f8fa82e7745a246a601606333c0d627bb","first_seen":"2025-03-16T21:48:34.848969Z","last_seen":"2026-06-06T23:51:55.905182Z","times_seen":13,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/assets/qXZ5sUEZUdCVU9YfPX.css","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:21.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /assets/qXZ5sUEZUdCVU9YfPX.css HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-101f53\"\r\nexpires: Sun, 07 Jun 2026 11:45:21 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BfNDYpq5j3IVlpOUtSVVEYVEu3wYS56iKBMMMUtK9UwN2S2WRUvsodPUfVBxSCxG8v44JVFIUrEdyv8Cx7vOFbOSsgrum7lxTG3v7kH3uiLewiLeLfFlykhNsX28rQ%3D%3D\"}]}\r\ncf-ray: a07b4a4a8a87b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1056595,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"649b104d44c7ee86585ab099c993931a","sha1":"250b9390c3d6de6e632501c21deef7223392f45b","sha256":"169f8aea8579d3e35750e8c3766ea3cf33801e047340d9bb1a7f404168755829","sha512":"5fa5d3c4a84c192f812e45937af81078ef91dee8534016c0560751cf6192a12e82f19685d477acb1c78e1c467bd31100c44fdd6ab1c946a94c2b925577e4b80f","ssdeep":"6144:U5xsamKNSgV66snED1wR8oQ4hiHxd5UQlQacxZdNv0XpucZDXWIDvDFDW6MExLc+:U51XwCvHxDtnc/2uc9pd","tlshash":"422529782b84113cfc0bdf729ae48adc652de153db534ed8a609763483c72e72673698","first_seen":"2026-06-06T01:45:51.878042Z","last_seen":"2026-06-06T23:51:55.836366Z","times_seen":3,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/ufkzU1PfOqCT_Gm_kV.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/ufkzU1PfOqCT_Gm_kV.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-2ea\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B0aCew%2BmP2YPcB2wK0NzCP%2BbdQ6DljP2cmkbOvh8ombldwd0YzeAW7rPCiOdOVpJI6xNKrkvCCxtIlPLKsLNW5lBsNVTuUOEqjnyFN4xn9XRAQdmOVE%2F0JJ7H1BQ8Q%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\ncf-ray: a07b4a58ac17b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":746,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"82b66b034d3d0f6429160d0b2986cf61","sha1":"964670b2b3cf1919e874055c2258118934ea932f","sha256":"0d3cd10cb264b16c24c7a98ddf4143f79e346b43042de8a1bde6e9c8d48fa7a8","sha512":"fde6c5744e0f5b700f89f5f17c728b03632d1427fc55892891d5fc8a8591363e06d8c0d4bd9120370656804695ea86064660ef7d6c7b31791769a4225c0c44f2","ssdeep":"","tlshash":"490189247edcf6e2d26b086855d15349db3063ac58d400566e6783700fedbf3c86bb00","first_seen":"2026-06-06T01:45:51.926999Z","last_seen":"2026-06-06T23:51:55.874707Z","times_seen":3,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/If3LiozMChB_A1xBdJ.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/If3LiozMChB_A1xBdJ.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\netag: \"6a2034c5-1b\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mn71gv81EjxB6B%2FrVLoK1BrAl3kStxOo%2FGByl%2FE7tnEYnrLLxIH8uCd6j1rrBTDTU7wAlofZ374tP5CQ6JXfGfsrYTXQ4R6Hx89BYF1oMQTGHqUaXy9t1X4IDSWXwA%3D%3D\"}]}\r\ncontent-length: 27\r\ncf-ray: a07b4a58bc21b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-06-06T23:51:55.909505Z","times_seen":727,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.20268-tg.cc/upload/img/6a203ab2fe2b.webp","fqdn":"api.20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /upload/img/6a203ab2fe2b.webp HTTP/1.1\r\nHost: api.20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 03 Jun 2026 14:31:14 GMT\r\npriority: u=4,i=?0\r\netag: \"6a203ab2-4502\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Coc2h72OFuA0ljLC2REB6gmRgKx4ZoQotH55zx2I3BDPScYV5%2BYlXK%2BTzvGCt1pFgLD7rCJubXOpZLQ610SswuRIuGpdYSHL6VTN%2BDIjSt%2BSqLPFIUOmq%2BMQJM%2Bo9m%2Btm6w%3D\"}]}\r\ncontent-length: 17666\r\ncf-ray: a07b4a5a5c49b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17666,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 160x160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5d9d490c379cd6da1b808a70426c5be4","sha1":"92010130e7f1db77a062c0b4900db1bfb55e488d","sha256":"e418b47c6fbcb25ec5f1f9577d9cc8bb65a3dd2abb7f5cd8c42527e249308627","sha512":"a949ec74fa7423b2d1780f7e8e9f6449992d98c8e62a6b1bf687ac30ebb80fb0fa71f6683ba3701c7425a610f59c96d91b03242b1aceaf5b5481d85c55b44ec7","ssdeep":"384:W/4AdNhk8QR3WC1GFj2AAiEkj+ZabgGMzuQkgCUfah1z98VO:W/n/h9QR3Wpj2AARkj+ZaBILU1p","tlshash":"ba82c0a36160f2cc5bed3691391456351e2d790da73b067f4fd80426a5930aeb4b1fc3","first_seen":"2026-06-06T01:45:51.911518Z","last_seen":"2026-06-06T23:51:55.888855Z","times_seen":3,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/JUTSvMR6ChBRYUpAzv.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/JUTSvMR6ChBRYUpAzv.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-61\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jtlg2gv%2BsRen5ac6u7xP3mWQ88SUoZjPNOsZ1jnLTZuClpvX0okdtCvaRr38fHwlsPqDKBkkrr13rMNZh19gyRE1mTHKsVgEE25YMy4OAoOO47rHfgsTm%2FRP%2BcpYfQ%3D%3D\"}]}\r\nage: 0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a07b4a5c6ca0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"3daf8da667e5e94fc3b77629f6ed9424","sha1":"bf7270ff9f8afccdbf0e345ee9c903dd238642bd","sha256":"e6ee91cbc86f4cc902de63d0bb67a8f5383d9440b82f30332efaf4c92c1f0e35","sha512":"77e1a178734db809d1e1c7288cec627bd83fb1cb1439bc81b427ad14de808ad67d72577b29d0cde4ac6be8892590521f2abc812bb1c548053935a3c9f449b2b7","ssdeep":"","tlshash":"33b0122f080810b099480c8d230c90230730192d33932a802218895d43591a2c14e655","first_seen":"2026-06-06T01:45:51.894509Z","last_seen":"2026-06-06T23:51:55.883977Z","times_seen":3,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/74.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.63","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/74.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 4251\r\nlast-modified: Tue, 19 Oct 2021 05:36:06 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 06 Jun 2026 05:03:25 GMT\r\ncache-control: max-age=86400\r\netag: \"ae64499c8825452f6262177ee6dd525b\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: xh-uV2Jf5POf6cpZmS6aJQGuTMLCOGQgP31AKX7Ll8ksrVu5WSv3jQ==\r\nage: 69552\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"ae64499c8825452f6262177ee6dd525b","sha1":"92a35e0817cefb5befbb18422fb4c9d220f6754c","sha256":"47fb417f6b72c4edc08dfb90a376b2c88b3b51992bf3c83dd14e011edba2f339","sha512":"1a776374f3c20d16bf0c84dbb28a6ca3d0a110ca928aa87f56d79d09b898091b84f4d3ea164a6c79db0c9fedeb66167bd83b854267c2870394f70dc536117441","ssdeep":"96:IqQDUBKTuBVrN2Dc4tR/HAwaHEIkVZdBrc2nPatF:IL4cTIB8c4n/HbIegdF","tlshash":"00918ede37594349986e152b32ca7f282c32b7db00753e35ad4946c327b4063e5d6714","first_seen":"2023-05-04T14:40:12Z","last_seen":"2026-06-06T23:51:55.854372Z","times_seen":13689,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":86,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:21.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.30.1\r\ndate: Sat, 06 Jun 2026 23:45:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 05 Apr 2026 10:29:48 GMT\r\netag: W/\"69d2399c-1c675\"\r\nexpires: Wed, 10 Jun 2026 23:45:22 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116341,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-06-07T01:47:03.504429Z","times_seen":1545,"resource_available":true,"data":null}},"time_used":2135,"timings":{"blocked":1054,"dns":1,"connect":24,"send":0,"wait":24,"receive":0,"ssl":1029},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/ZiGGOXcg40D39Q8g-a.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/ZiGGOXcg40D39Q8g-a.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-d2e\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FWU1SNFVFML208GNwFRQwX9cwj0t82p7crV1sXrOrlTtmrh5wmhsJhZ%2BVKNcbpqaGGM0rS%2FKhm6sawaxUi4Af7fh8vNBxmhF27YIaB8J1tPDLBJimtdQrpXmzH0OBA%3D%3D\"}]}\r\ncf-ray: a07b4a5c4c8cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3374,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3373)","md5":"8dce6c03eeb476cb81c0f5f7e99db834","sha1":"dabb0c11bb0d7767c01e7e2cb1c30792f76d90ac","sha256":"d15275965e55c9756498535b6657d3f5ece16c1f4eb843b83334b5517bead9ba","sha512":"8805bd650fbb812111188138eab078f8f8c0d609ea9a442d801ffdeef0ff4aa38cfe0f9b29ca42e04e7815a7e682effc738089a2db5a4eef3b82196e75f5260a","ssdeep":"","tlshash":"a461e829fa88503993e3b17414e14cd141365f1028c2e6efd2570c84273ab90b3dfc67","first_seen":"2026-06-06T01:45:51.906236Z","last_seen":"2026-06-06T23:51:55.850474Z","times_seen":3,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/HOCBFsKgUHNm6zEJV3.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:21.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/HOCBFsKgUHNm6zEJV3.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-185346\"\r\nexpires: Sun, 07 Jun 2026 11:45:21 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eZeikiNcOj%2BhNLF6if8uywWlmssDlZdX9iEWb%2FMzeS%2FGiO2D4McEoVy0tip3mRuMt1ATMT%2Bt6GCKAL0pigjH9pDmfNbYf3RYIB7jCPopQblRTXeQZxJJKU9JS6%2FIwA%3D%3D\"}]}\r\ncf-ray: a07b4a4a8a85b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1594182,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6914)","md5":"05aa68ce8b8e9fd240f013f739ecfc2c","sha1":"e31cc71c38b9563f1bc393ed6e18a54114175f37","sha256":"106febd0d1cac071a4f0bff201b893ff00a908e906592046af76feec55bc02b9","sha512":"3137c9554e12ebece3e6e635ad873f2c547dcbdbdc5b55307a1f98a6800d3a6bc72472c24c0476ee4c095a5982b1fe3f663a6a09d889bcc0b1ed76f135ba1ad2","ssdeep":"6144:WykkhipBhkSgVrIRbcfMGuySJ2ie+2uxFDpyMo2U:WytYpB6LrebcE7J2kxpVo2U","tlshash":"6f25f9281a6bf744e418c0dbfa373d84c59dd18aa44724d24f755bb31ba2793eaacd03","first_seen":"2026-06-06T01:45:51.944171Z","last_seen":"2026-06-06T23:51:55.903824Z","times_seen":3,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.20268-tg.cc/api/adi?rts=1780789523226","fqdn":"api.20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /api/adi?rts=1780789523226 HTTP/1.1\r\nHost: api.20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-lang: en\r\nOrigin: https://20268-tg.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vd8PsAoXvftncVYFDnsOM%2BJ7KxdvxIK7tWQdnNGHMTFUupDdSE72kp2pQhzGVjxvyzDlf0aRZJPi7n0%2BiNuKO0gaYQZcfOHA0g9xbaDZNT1bSoef7tj9GPQfSI9fg562vPc%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://20268-tg.cc\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a07b4a592c2ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":260,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"2d560cedccf0aea911c1b1583949e54c","sha1":"7a5c4098fb75428ad1dd511ae847d9fcb6022a96","sha256":"7ca1c2fc707e8243fa10c0ddd072f547668bcb00c0bf33d730b2be824833370e","sha512":"7fc470872064c4f282e8cfa9569e78e40d1dd33c36b46a4e4eeeaf03e8b2608a5b32157ea502c3c180e1b7892f1c60dcc79816d8e3dc9411b236a9f56efcd7ae","ssdeep":"","tlshash":"eed0954517cd4d8667dbfb1b847f1205bf90691d9bb21283175fd055f6c1508d303058","first_seen":"2026-06-06T23:45:53.306045Z","last_seen":"2026-06-06T23:45:53.306045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/ZTY7rClvtTCs3O_Z4T.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/ZTY7rClvtTCs3O_Z4T.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-712\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G9%2FiKNBDPhOBdQcX51UNf3djNjWhrt%2BiLR8of12eJ8fLE9UcWpeSo0zEsHeFM%2BAO2lK5AB0YP3q59xp1OENR8xQoHyrgrmV%2By8psmOK9PyE2wrOm8lwSBsoeH%2FB5WQ%3D%3D\"}]}\r\ncf-ray: a07b4a5c3c89b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1810,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1809)","md5":"24648e937b6691c7ccc79022d9e132c5","sha1":"8da807daecccbc646a79a5ef52c366fb1420752a","sha256":"0d39e8a49c336cda2e7d1f9d37f9633175fd2045c6a5cb2dd5a0fe6e29aee634","sha512":"a54164b377927f87772f1c73893148bbe0d3ff8228bcd6c33a6043942cc57a091fac086370a80ad09bdf953517fb929f839568ae7e002ce68b64e0130c998cad","ssdeep":"","tlshash":"b1312191f6b9d074937a58e1c03d1610e1591f447159f9ead4ff0d826e8284af93ba3c","first_seen":"2026-06-06T01:45:51.849661Z","last_seen":"2026-06-06T23:51:55.914172Z","times_seen":3,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/3pcQdaRvwXC1o6YbPC.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/3pcQdaRvwXC1o6YbPC.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-9d\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SENlhT8cYnvuPWil1F8vvZ4b6%2FFEtmJEhsrGyVcPKoQrRXCAvEgjyubxxg4D4NGr3e5OxLnNNA%2B6z%2Ba%2FD%2FX%2F3B18HVmJZj6mgqXi%2BbF5qkfYyBewPAL7iOApYpPFsQ%3D%3D\"}]}\r\nage: 0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a07b4a5c6c9fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"7cd7d4af624aebd3dcf841f40526d8b7","sha1":"94f1e4d44c6d000d856c9361861edb4ce57717fc","sha256":"1d992fc6b3e1ce85aeaf57877c981aa95f98b59a3db5f519cddb6731ea462f37","sha512":"8158f3ec3df11aa08e4524cdc46daacf11efb6ca2a729f930f6c51c418ad452f75f1fe72680e393d9351dc7d7f259f71a4eacef4ae6dbea68a4b9b6b0f1bfae1","ssdeep":"","tlshash":"67c02b1e784d60f0865d0cfcc1174a7f53163e44332697f0a52d866f436a3261347f2a","first_seen":"2026-06-06T01:45:51.893187Z","last_seen":"2026-06-06T23:51:55.839122Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:22.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://20268-tg.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 31 May 2026 10:07:43 GMT\r\nexpires: Mon, 31 May 2027 10:07:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 567459\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-06-07T02:29:35.057765Z","times_seen":18313,"resource_available":false,"data":null}},"time_used":505,"timings":{"blocked":221,"dns":1,"connect":28,"send":0,"wait":29,"receive":34,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/assets/K0KoSAud48DVhq-OCH.css","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /assets/K0KoSAud48DVhq-OCH.css HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-c685\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2FV%2FXjpxiMEj7fAUZ%2FB4DhMor0Y0Hzv6PwpwJrexOsa77WT2ZYGWF2i3FpqBKT0Ly90xVJVa%2BueP6n6J1PSlV4X11WB%2BAHAzt3eWq6ZbEzahhW5LcZuMqc%2FjBrkVbg%3D%3D\"}]}\r\ncf-ray: a07b4a584bf6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50821,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (50820)","md5":"ed3c2da8cdb5a509f6e84199deea6378","sha1":"23a4b5725d53707d143a1facf6e82cdc002f212e","sha256":"74a69d6cc5b5eb6b65d73f426c3cec9cc49c176714064a388335b9c44d2fb0a6","sha512":"4e6eb920550623188104084c7f0c32d0d07c86fb7bfe10f16e710c2700e84c0f3da3367e2f217bc9887b9ed92770a43bc4d5cdb0f4363701b9472722cb1458da","ssdeep":"768:tAxh0Bt78u5Y0Jwh0DNu95sRlDYxgRvvTo0NBW1sBO:9Be5EYgo0NG","tlshash":"16337554256c633eda2bf16358ff46d91910f713c1377a4aba02733199dfb822231aca","first_seen":"2026-06-06T01:45:51.949208Z","last_seen":"2026-06-06T23:51:55.918658Z","times_seen":3,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/assets/DEQTsFfeYaDGTUQ_qq.png","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /assets/DEQTsFfeYaDGTUQ_qq.png HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:24 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\netag: \"6a2034c5-1061\"\r\nexpires: Mon, 06 Jul 2026 01:45:19 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 79204\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eRewgZRGcM1Mii%2Fu%2F7MfZ92eQB8lIN08V6x6te3XcF2ioNLQ1i5AvU5JvVeS95%2FvzbGV5nAuYA5mLa7ge6kP1F5Bdcy8pUCtpa6O4lh4wDrznLUPFishIdRo7R%2BP%2FQ%3D%3D\"}]}\r\ncontent-length: 4193\r\ncf-ray: a07b4a5d3cb8b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4193,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"495cdd4f5eca06d882dd0b72679c4ff5","sha1":"32c5af630c00cdc2af8e3f0f74045d2d2a0b274a","sha256":"5c925c9bd383f843af93d9b07da06cdd3327cc045778f4a25cab0881f0653df0","sha512":"bf9e68200c79514f02c26aa05d987f3b38fc93e6a0d61105ff9f502228da8cea4b1bccc81fdb05d8f65a67bff7f1d35a5d1d14d68060dfd9c1c5e039f5593a35","ssdeep":"96:C2Q37VlV3FNNSa78YOO1DZtr1iHbQO5NTSesy8nSg9RFW:C2QLVltFNNSa78Y5vjUN2eGSeW","tlshash":"a5817f9c468352ae0284b6174fc936bde9b85d23e62d6c5398c032af49b056029b5079","first_seen":"2025-03-16T21:48:34.855768Z","last_seen":"2026-06-06T23:51:55.907887Z","times_seen":15,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://20268-tg.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Jun 2026 01:48:43 GMT\r\nexpires: Fri, 04 Jun 2027 01:48:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 251801\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"9418887ae687a640730a62da6d5cef56","sha1":"c82ce6b645275be73a81d3c9027f540c0add912f","sha256":"3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7","sha512":"c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487","ssdeep":"768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI","tlshash":"bad2f160971a7d67dfe1de267811eb4f43aa36df0f515a4918da35cc231e38920b43e4","first_seen":"2025-09-02T19:57:23.466991Z","last_seen":"2026-06-07T01:33:26.473894Z","times_seen":14400,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":29,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.20268-tg.cc/api/cus?rts=1780789523226","fqdn":"api.20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"OPTIONS /api/cus?rts=1780789523226 HTTP/1.1\r\nHost: api.20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-lang\r\nReferer: https://20268-tg.cc/\r\nOrigin: https://20268-tg.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://20268-tg.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-lang\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eej%2FltBt1ia1o1RT95bZzSS1c24c5YrfVkKIXbShPW7xFVWW3nCoBRc9RHnHaRAUlMqAsVIYGk4alQlD9dMI4G%2BedHoUzBAQp4KRgrzw7sCg2JYoowhsW4XE%2FeHWwrn8fmk%3D\"}]}\r\ncf-ray: a07b4a583bf5b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/xNR8LKQ3u1CcN_uO6B.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/xNR8LKQ3u1CcN_uO6B.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/dlovnVzDC84M3VPCD8.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-6a56\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Osiy9r9HNTUXx%2BtlFNIQ6mFIRXA7wY2560nuoUSRwerJxYXeEtyectWb14D6RnfIxurPWHIbWKkL97J8Gd0QhC0wpxUztZ5MdobdfIfBz9komqZzEe5RCLI6ov7mBA%3D%3D\"}]}\r\ncf-ray: a07b4a5b0c65b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27222,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27221)","md5":"282ac45b84992114a8cec21a64aa41d6","sha1":"285ab1bec1f4a6793875b98f6a2d8442b8045614","sha256":"ebab847469d2b4f8e3fa7bafb6135c5132d2bda9ee42bcfd15edf18fb844135c","sha512":"d7f27cb5479ceddb9bf87f9264bc2694a695d72d4a65b476b7bf7a7c3510a728aba256cf424573e79e5ed830668165e5f0bae188344709d2a2dc648a97569fa3","ssdeep":"768:YLNVmWmFp351iBFmbI5qUVhHvLKDgeL0m:YT7mdQpWwm","tlshash":"bcc20b3060508329fd94b0651d84ac466d880ba9da939de3f1fe8d87d7c29b7eda43dc","first_seen":"2026-06-06T01:45:51.937177Z","last_seen":"2026-06-06T23:51:55.852917Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/Wrg0OYHDZ7C1Uy1V8f.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/Wrg0OYHDZ7C1Uy1V8f.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-4f5\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a0BAG8qiW03FRCloJsPY5NAWnUJzMIHvndW7MPg9qc0LeoLhfWUhJ0SQ6HU7TNpUq7MA1maHl0NU%2Fdkcv%2BsOkStUPoFzvBQ5DEDb8%2FAS%2Bm5DckagkU3vEYxOVY5Wyg%3D%3D\"}]}\r\ncf-ray: a07b4a5c5c94b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1269,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1268)","md5":"a7d5ed6f2b1a0d4cf04a10c2f6673744","sha1":"6ca0569db854151b5b26c60954a1664e44514ed9","sha256":"a14e68372723f42c4fe5579fa6d5dd98002f264297ecea8f1272f61a11855a9b","sha512":"da0a13e4589b1845858c7374d11d7b93743cc6bb2b1670b033f536573d1ddcb65a136e2260cc112968e9d8317f3dcd59c54d0833b36cb57e358686a6e8ab1e3f","ssdeep":"","tlshash":"e5210292f08df17d82ff39b6a85b5016c3615bd0336041cc77bb058e47269d1956ba1f","first_seen":"2026-06-06T01:45:51.91461Z","last_seen":"2026-06-06T23:51:55.834169Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/5805.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.63","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/5805.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 685\r\nlast-modified: Wed, 27 Apr 2022 07:39:01 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 06 Jun 2026 03:33:44 GMT\r\netag: \"b9913f5599faab08d2addf87011c61e0\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: bAg0O_l3iDbL82_BP5sQyEu0Ejgo4a1ruUv37cxRkUwlC3B7cmALnQ==\r\nage: 72827\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b9913f5599faab08d2addf87011c61e0","sha1":"d9ae6e6a8ca0e50e02a991d032d9b9a461079f95","sha256":"68ba1605b3a54d7f827c22cc7252f01c6bf9412cfa6573be2c91fcd4b9e908cd","sha512":"7baea45f411fc30232bd93d04b8cf34414d333096ec669558ee6dd4a4a725785786f488b387e6c38654ba4fd3aecfda5526de2d949851796582c75214a42150f","ssdeep":"","tlshash":"8d01d8fb0957c025408f01f8224f7372d160c4eec9c7e20d89d9f7301862ad24c4524d","first_seen":"2023-05-15T13:26:32Z","last_seen":"2026-06-06T23:51:55.911548Z","times_seen":498,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/assets/TtHozvtfXdSVA4yXCC.css","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /assets/TtHozvtfXdSVA4yXCC.css HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-741\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BA%2F%2FbfNVifScZ4uiEXEjW%2BoEAxFqQDEq2PNI71zbCTfU0PQMYoSfqb%2F4qUeVLARTu91dmiKjfZL333PhLlUt6rw%2FRkTQkTwst2T4cJHrfPCDo5BCKlkMXrHMEIENVg%3D%3D\"}]}\r\ncf-ray: a07b4a586bfcb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1857,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1856)","md5":"c41962c9f2a02eba8f3456ec86fa9f87","sha1":"6a4a50d1dbdfb1334cb748491e736add30525c2e","sha256":"40c0e95eec894a533bf70113f8afa7d77a3f66576f740067a5132ecb45392660","sha512":"c1c48c8a2f0ceaadf6db090b574963ddb5bafb04dfca815cfbb2e478d64177e9734f658ef33e51408cdcc88235829c1edb66e1e3ecbc1f61ba087e2133992d30","ssdeep":"","tlshash":"023191e1a29995b85f62e115cf56ffdaf1686760da028149f0c31724cacff780ea1bc4","first_seen":"2025-04-17T13:49:08.73869Z","last_seen":"2026-06-06T23:51:55.877249Z","times_seen":98,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/isXIhRwtk4DphTiuT0.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/isXIhRwtk4DphTiuT0.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-8cc\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VdzBzVgVz%2B8lWdujzUPKytp58ZjjkIpxHMqDXqTPS0NGTpu0n9wqTGLsI1W9D6KbF88%2FwcYchBqxcA48%2FYA08UIdFHg2f8RJfWyjfE5cV27Itqgx3wbXIYhKKP0H2g%3D%3D\"}]}\r\ncf-ray: a07b4a588c05b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2252,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2251)","md5":"1d9f0b734cf3c6c762e650328de80c4f","sha1":"04034dc1f810d318c27ce473cb113d8db2e39f98","sha256":"ee8a90aff1ef584419df58d62874cceaae0fef5e2fd532ca7a3c86455278f683","sha512":"baf1dcdfd1c36907288de41a618d7c498dcca1fcb8247890034a55b15839f7348968d079b622e00bb083d7e3f7facf11d0142f1300e1c1abf745b6e248f16785","ssdeep":"","tlshash":"ed41746cf511dabca277467858120050220c1fdf9164ded4e1ae1f225ad6cf4b55af78","first_seen":"2026-06-06T01:45:51.859727Z","last_seen":"2026-06-06T23:51:55.837341Z","times_seen":3,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/ScwkR8IB9WDfhpH18i.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/ScwkR8IB9WDfhpH18i.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/dlovnVzDC84M3VPCD8.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a2034c5-693\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hoJgOg4cjHHnDLddF%2BkMtkkelvmEvoS4eZm%2By8hUbuRvosVHrambC0bnbC4BQLpP7U%2Bw5zNyusBy3M0%2Fq%2BHGPq2IPQcaOpTL5%2F33pZMvzv3%2BYYRFyA7aodmWxqxJFg%3D%3D\"}]}\r\ncf-ray: a07b4a5b0c68b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1683,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1682)","md5":"93a23b2e287fc35e0b18703a46fa82a5","sha1":"b065ee6393a9c020630b2aea2ee74401a91dc214","sha256":"6fad31265d8a53c314ecaa07d3b5f86c18e9a739800181a2a7b55a742768f1a3","sha512":"5164f66ef40c41e7963867345c555538afd5ccc30a13685c53101c7e71a58db7d472c02eee661500047ab5b8f795c8275232c246670a7ea2e9a1d3e6ed48c38f","ssdeep":"","tlshash":"e5316489b41ecfbca4b70c39650bc056901c4fdef236d745b0e8461357d6c78622ab2c","first_seen":"2026-06-06T01:45:51.899665Z","last_seen":"2026-06-06T23:51:55.879564Z","times_seen":3,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/Pvyr1Ls44eCQ2iGvVw.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/Pvyr1Ls44eCQ2iGvVw.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a2034c5-3f02\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1RJAG9i%2FtIbucQiAjKIjYqfTPkRLUoocZjW68%2BUcYrqRUd8r2h2pBACX%2BCzenMnoiMqRPCVO02y3p8vYN9%2FnrSN3YOVDbebIb6u9EOozERpAcPRxFFEjO5sbjm8zXg%3D%3D\"}]}\r\ncf-ray: a07b4a5c4c8fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16130,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10486)","md5":"06d84ea9e0bc27a81f408f7ad329a1db","sha1":"fe7c465c8a115adfb54a95f9fa1ae97f8f74b1b6","sha256":"297218eb6b1bd1ddeea5b7e0940d17d22becf76fba086ac6170febed1f96923f","sha512":"b72d717783afcc3dbfe961168c818911a0b77942f0d9288c71a803913288efc0e0110168c6dbeccae97e95f210910775715352db510bfaa3fa416f06d59abee4","ssdeep":"384:fUHZBzU+Vr2NFDN3moLFj4prnnEFHJSR/xdbe3V5yeDrCUJ8fBHCT8PrS3U:SBzU+VQFDN3moLFj2rnnsHJShx5e3FD8","tlshash":"7c72f98679407032c7bb99c5d0d905a1672927c8f229c2d6f06e2d1b3619cb8f1fef1a","first_seen":"2026-06-06T01:45:51.942272Z","last_seen":"2026-06-06T23:51:55.898718Z","times_seen":3,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/cE6Md7SFfkBLZ46nNZ.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/cE6Md7SFfkBLZ46nNZ.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-9f4\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sPIar98mSxnVMqle%2FgiewGTWINS8gF6X5gTXTjaOUTYGOFpXcPEoBJrbLOg%2FgBh66tSgVvX8cSTyNxpdEkVc%2Bbp7NQw2DWUB7XiJtMcIq8oiJ%2FU1AssMchs8XV0fTg%3D%3D\"}]}\r\ncf-ray: a07b4a5c5c92b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2548,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2547)","md5":"20577e0d255c8f5d4f49a04050456ec4","sha1":"1c12ad5c045e46c1f0b4c6b4699604b3211d7af7","sha256":"2920902c3143a0eacd59b2988b3768eef16e087e02a8fec4e6441ca8b8ba4cdd","sha512":"840c389dff5de85147d903abb669e694d3e34ccec0879b31fe8fe55431eb3e798d1468cc58d3947770d42b305713784c6129eb0f735dce1d1c802497ad24536c","ssdeep":"","tlshash":"63516299f6a6503d8b7328f532e420c5561e13a0efb651ed501e2b004ba7c23bafc939","first_seen":"2026-06-06T01:45:51.932614Z","last_seen":"2026-06-06T23:51:55.883086Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.20268-tg.cc/upload/img/6a203c3d0902.webp","fqdn":"api.20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /upload/img/6a203c3d0902.webp HTTP/1.1\r\nHost: api.20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:24 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 03 Jun 2026 14:37:49 GMT\r\npriority: u=4,i=?0\r\netag: \"6a203c3d-324dc\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0YLQQ%2BhahapGk1iVzd3cJ7PxxneWpRDV25Zp%2Ft7pAb5TYX3yz7JyiCKrV%2BgJHs51umCpxY96KiEU%2BkzLdTHDqht8kFd8lN8fE9KUUfEvLdad%2BKkkUJf2QCrrjPwzieS%2B1Io%3D\"}]}\r\ncontent-length: 206044\r\ncf-ray: a07b4a615d28b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":206044,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 933x388, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"31b6426cb8dc53c38128106b8948bcce","sha1":"b85a60d51961554bfaf751ad81904a7ffa23c1b6","sha256":"c246b7ca6b453244b702e7812efd60f5be2b0620c94d597589e503810fb6de1d","sha512":"d4432fbacc01255d1c72bef80692ff184938b3331a2f70638c7e14b5cce8574e3f21e5c5ff473b786e5c21819ba9c66d8b3bb38d6a240ecc75471d403141fe3b","ssdeep":"3072:wSY6MMq+IWDkxXl0RapQHVhJvk9+AaQ9wQIyDi1t/pGcPBk91oGwBe398:w5x2kdl0UpQ14sAaQ9j/DidhPB2oBei","tlshash":"1d14124271a2164e4af14e71b8e19d622bb0eb331d9d263fe700443de54bf6c5de89ca","first_seen":"2026-06-06T01:45:51.903199Z","last_seen":"2026-06-06T23:51:55.917822Z","times_seen":3,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":161,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"api.20268-tg.cc/uws","fqdn":"api.20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /uws HTTP/1.1\r\nHost: api.20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://20268-tg.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 0wIhBLS7o5293wEBOp/u2g==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 06 Jun 2026 23:45:24 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: kJT7T2OjrmRCLLteI3wVjP5a9oY=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5BiTeDeOXnFBz8ojJK8EvcOgSOjYO%2Bt3uXqlDigvhSdN0z0MaYfAGoLVx9POrcM6snv2owclDZAmf2k2VEsjBSVboMVcwzuykHIG3OQPOGF5lzfqFNimnnsiCRORTg%2FVLBU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: a07b4a5d2e0276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=515\u0026min_rtt=481\u0026rtt_var=157\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3111\u0026recv_bytes=1245\u0026delivery_rate=7168316\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=c65aec08fdc17957\u0026ts=335\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":382,"timings":{"blocked":0,"dns":21,"connect":23,"send":0,"wait":320,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.20268-tg.cc/api/home?rts=1780789524075","fqdn":"api.20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /api/home?rts=1780789524075 HTTP/1.1\r\nHost: api.20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-lang: en\r\nOrigin: https://20268-tg.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:24 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D30lD4vxrVtOw5qs8Vbe%2FmF9ZKVV6M4%2FNtSXwl1ANBgZPJZ7Dr8pbUP8J1qMCfvbHoIQ0AiDIlIgeqLoam%2BMIPAqaovN4dbUqIecuk0o5%2F1dVw%2FHhkb8mjYiCRYe7clDPpU%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://20268-tg.cc\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a07b4a5e7ce9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25548,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (25548), with no line terminators","md5":"b949b402ceef166f7c41beb099cd1e12","sha1":"ab0f43f35260176318909dd1d0a773854bbdfd70","sha256":"5423bd76da9621be1098770b4f85b9ba1cefbc8da3210f5294aef3e6345d296c","sha512":"1c6be37a9ce48b90df2f1c639812b5aeabb9d16b46e12b2035bfa1a29a0b49c1b24d14ddbdaf8e54d8218acd03b7a9d426d06504ff93066c8372e9593f4b47da","ssdeep":"384:ZrIwKkkrAyuVbp9yMTZKn4hiOgOyY+Qw6PbUB2qhA2hMFwTLdEDt5In/VWgVRDDj:ZvKlfuVbp9XZK4hYOFw48NEh5I/vRDn","tlshash":"c0b2f17181aa4a87a796348d3c4c6fb6fc3287f19e7ab052bc4e13cab50577d6261f40","first_seen":"2026-06-06T23:45:53.348484Z","last_seen":"2026-06-06T23:45:53.348484Z","times_seen":1,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/1027.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.63","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/1027.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2780\r\nlast-modified: Tue, 19 Oct 2021 05:32:40 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 06 Jun 2026 04:08:03 GMT\r\ncache-control: max-age=86400\r\netag: \"856bfdb63dc0d6fad6b92fc6a29719e1\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 39RNO8gVUya5-P6Aj_SLfbNZD-6zH9yGzel5r6GILka151SNiBTwSw==\r\nage: 70642\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2780,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-06-06T23:51:55.894215Z","times_seen":21366,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":110,"dns":71,"connect":1,"send":0,"wait":3,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:22.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sc-static.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 22 Oct 2025 00:00:00 GMT","end":"Fri, 20 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:63:7D:63:F2:DF:8F:C5:65:EF:16:8E:06:3E:E4:66:D9:41:67:CD","sha256":"91:A8:D7:CD:20:36:14:EC:9A:D5:10:BC:DD:44:F1:9D:26:20:78:F8:92:93:7B:37:6A:F8:E9:7B:FC:7E:72:66"}}},"request":{"raw":"GET /scevent.min.js HTTP/1.1\r\nHost: sc-static.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript;charset=utf-8\r\ncontent-length: 24909\r\nserver: CloudFront\r\ndate: Sat, 06 Jun 2026 23:45:22 GMT\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncache-control: private, s-maxage=0, max-age=600\r\nset-cookie: X-AB=643bf6509adb46429e87b2fbb2d5fa2b;max-age=86400;expires=Sun, 07 Jun 2026 23:45:22 GMT;Path=/scevent.min.js;Secure;SameSite=None\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 3da6f6abdf7146387ea7a7f42136c780.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: y7LtoOxYlxUpCRy8KGH-3Xn1_zrHaWc6oFg7gLSRBgKb37z_0Srydw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":59263,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (59236)","md5":"ee9d6d0192a874521fc25cc6de8ba3cc","sha1":"9aa349a2625d00b804ab30d7b54c5bca8c93c943","sha256":"a2cb6cb89d242b64030e56ca9bb71a8fc3d02bf398b4d990b1df9c63d7217834","sha512":"3246fab43b968ec30aad4c949ed5ce582fcd4fc1540ceec31951b5cc0fade3a4dbf427978e0139908d30d8c94fbcf87218c25d12d9b5da2c9dd9edf9153cee4c","ssdeep":"1536:kb3gziinU7a4oiLsXb2U/LuG0ch4Hl/HDTkzNZkVXK9:o3j9P+Lj4TY","tlshash":"3043d58cf7d9b02103973472497f541be33bba646c0bc650c526e5887dbc59aa237eac","first_seen":"2026-06-04T23:22:17.963341Z","last_seen":"2026-06-07T02:21:45.573869Z","times_seen":286,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":37,"dns":29,"connect":1,"send":0,"wait":39,"receive":1,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/2010.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.63","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/2010.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 854\r\nlast-modified: Wed, 30 Jul 2025 12:26:03 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 06 Jun 2026 01:17:09 GMT\r\ncache-control: public, max-age=86400\r\netag: \"8a5e9b87a7c053bb9d65cd8bcbc4b171\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: KFQtlafDQ318EgdtNLklY3uS9k293Lt12jqpfnBP7CcNdgCGGV0xGw==\r\nage: 80897\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":854,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8a5e9b87a7c053bb9d65cd8bcbc4b171","sha1":"2168aa11330c0401cfc5e0974b7ca94093c9d48b","sha256":"0b1d6af59fc52f5e8f88909ae09fdd4ee303dbcd00004c210b8e375759893cb4","sha512":"47a77cb24f98b7862798354660849992762cf9b9df17cdd872793f36467addba4fa78b7751c167297120010aa62e36fcf2b27c5d46f1fdc2270ae62665872e86","ssdeep":"","tlshash":"af011a7a5f05106ffe733a7083576661d745826711081e4880b3907c36b9c405d4bd03","first_seen":"2025-08-01T01:41:04.546261Z","last_seen":"2026-06-06T23:51:55.852075Z","times_seen":364,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":100,"dns":62,"connect":3,"send":0,"wait":3,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/YZrxc9yUzoCbqU0IDe.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/YZrxc9yUzoCbqU0IDe.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/dlovnVzDC84M3VPCD8.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-21f\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JRv01xf7lQrxOfBR2%2Fhgig8ZI7C2kJjV%2FJJRWCbwgOdEldnx6P3maX03b8w4DKye%2FUKU7tVJTlQ5iOb%2BI09Aq9QZx%2F%2FoeBNxq6vlRfBxiOE7aYQFsinD7VX5eB%2Bk7w%3D%3D\"}]}\r\nage: 0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a07b4a5b0c66b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":543,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (542)","md5":"2a0ec4ed95a3fb1bb968411b1895cede","sha1":"96ce24af5c47745ba9bded2d2d7d2f0c0e1859e4","sha256":"ad578cf879340635d17bfcf5d5921c5f8569ac38a01951a3707645ea805a4d89","sha512":"9e1e32c1221094eeeab39cf569d98bc86fa6f3339707e2f73e233fcf12052e9a7a89dff2ef86f151bc4223c5c4294b1a1800dcc6681ed6ed949575e2482eddf1","ssdeep":"","tlshash":"46f0200bd81582bdc5eb1d082843306120483eacc73099c4e2f925b2d3c2976e46ff14","first_seen":"2026-06-06T01:45:51.933718Z","last_seen":"2026-06-06T23:51:55.91495Z","times_seen":3,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/i1hPDjnSZZBgwtDQQg.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/i1hPDjnSZZBgwtDQQg.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-f6\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EHYsjw59i8jgDkhni%2ByIJ%2Bjw6DaYfXMVCohvCclceCYupQRd8uj3xHUXEF%2Ft4W3Q6HdJy%2FadQ24WBrGA%2FSBLBkuKo0xA8i5Ig%2B6lLaPirl50B2YWmLR87GU9Eg63AQ%3D%3D\"}]}\r\nage: 0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a07b4a5c5c93b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":246,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"2ea53b6f4b4df73dfe1f831edb7386b8","sha1":"74cd317b45a96b1fabaa2386d24383104b55e058","sha256":"964effef9654dc72f572661227d6b1a960a3d53adefd3e938c3babba394af2ff","sha512":"138696d04e4f205a5f11ea8bc212c4f2d41d68f51c3da973cd5ec54b5804d3b9ef26a3d0d485c0550bee3384ed9eb78165f5bffbcc1e4678dcb65ec3f4643723","ssdeep":"","tlshash":"31d02b04898843a82db1106a0b06a7b021b6015c4f74c2f4961e4e30cf1930a1e4ba11","first_seen":"2026-06-06T01:45:51.930827Z","last_seen":"2026-06-06T23:51:55.873697Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/q9KnyViAuhB8RPQvEu.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/q9KnyViAuhB8RPQvEu.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-4d5\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QGanNsoAuDb0%2Fe7Lir39LbJHsfgZyF7k8PDmK%2Bz0OWfTVwK7gZZS49kIYZZPL7XKIBMAGYBB2cx8bRWcqHyaJkik4Pi6lrbmMtlpBD11hDJ0XAcjPqhifSdEJpnWfA%3D%3D\"}]}\r\ncf-ray: a07b4a5c5c98b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1237,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (796)","md5":"c613846fce4ebb29907f2a96b5d0da04","sha1":"294d4be0c343b69821df43b0fa5351e0ddf2a84e","sha256":"7ad8ed3ede28ff879e59a8068c5de77450a8eff903e01419203f2f5f5c3e5d76","sha512":"1dda5c2ec2367861cd081e3f33dfb016a5bfbac4f0de4f23149d5c5dfdba6386935d20e3416f3b5000705746f7de95714887a9b2481bf6766bbbb87a421890fe","ssdeep":"","tlshash":"6d21211d6402db79d897495ce09c1802518c3feb9379c991f0eead2aa6d1eb0463e334","first_seen":"2026-06-06T01:45:51.886743Z","last_seen":"2026-06-06T23:51:55.855917Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/6636.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.63","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/6636.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1745\r\nlast-modified: Tue, 23 Dec 2025 07:43:14 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 06 Jun 2026 01:41:05 GMT\r\ncache-control: public, max-age=86400\r\netag: \"9354a310aca2467883088a4c17693018\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: DHg37hve7bSuYhSXcu0yoQwXwGgHx5SqnHXhAHuSVJBjXCIFHXSC5w==\r\nage: 79833\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1745,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"9354a310aca2467883088a4c17693018","sha1":"8b68d24379142124633ae339e148c3db3baa73e8","sha256":"66498e82dee76d44bd12f5517f74785af51b6c23c7895fe18684ac914abf33c1","sha512":"597efe5d74e6c66063f06724931aec73e4edb064bc939ed48618af592bd8b602694ad04a1534c816ce8c334d6711affc474f99f45f0338919a7a5413eea29966","ssdeep":"","tlshash":"6f31c5d01452a47bb1030b9196bfc6b14e7024f800ced7bc946a48d273399ba78960a4","first_seen":"2025-12-23T14:18:57.776197Z","last_seen":"2026-06-06T23:51:55.89807Z","times_seen":264,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/assets/yQQbQxzt81DYQdpHvT.css","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /assets/yQQbQxzt81DYQdpHvT.css HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-a86\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ii%2Fu7d7I7EX75BaJtha6BDUoPb%2F3HIfpeY5pw5Yle%2Ff4AlT4wYE%2BCPZgJL21LQi689y7gMh30NZihm0%2FM1sEDzHwzQvmLQaBctrvClX%2BMFaukia309LSQuNIjCybeA%3D%3D\"}]}\r\ncf-ray: a07b4a584bf7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2694,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2693)","md5":"3f28253ee7f3d1cb19aeafad1111187f","sha1":"3130fac7725b7f6a5fff4a7c9df18a1067aa012e","sha256":"02bc3b1cad3d4bb9b0160135e6b16eb62133091d879c8d0d0a5b4ea831149626","sha512":"d07d7a8607add532475e31995dc647464951961675fbe74b8f202ce19ae29023272d997a3f873542094654e4e0e4a5fbcea3dcf88f602e8bb4ab9e162260c329","ssdeep":"","tlshash":"6051b3424892279d4693863e3198f3c8e07e74e33bb7dddaa1498dc1ac9b67509a3c53","first_seen":"2023-05-21T08:34:57Z","last_seen":"2026-06-06T23:51:55.919236Z","times_seen":212,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/ZTY7rClvtTCs3O_Z4T.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/ZTY7rClvtTCs3O_Z4T.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-712\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jWeASD0U9dc6eFuUmpeq9pEaf57CMVsMZRI%2FSLaHqCZVQTJfeyBYD11MkiF%2F7zSpwtY4KH4XQrEMhbcPAmBrm96rLpsbp2GzPc8MDyN4Gu9izBDAXCrGeShFHVi7Hw%3D%3D\"}]}\r\ncf-ray: a07b4a589c08b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1810,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1809)","md5":"24648e937b6691c7ccc79022d9e132c5","sha1":"8da807daecccbc646a79a5ef52c366fb1420752a","sha256":"0d39e8a49c336cda2e7d1f9d37f9633175fd2045c6a5cb2dd5a0fe6e29aee634","sha512":"a54164b377927f87772f1c73893148bbe0d3ff8228bcd6c33a6043942cc57a091fac086370a80ad09bdf953517fb929f839568ae7e002ce68b64e0130c998cad","ssdeep":"","tlshash":"b1312191f6b9d074937a58e1c03d1610e1591f447159f9ead4ff0d826e8284af93ba3c","first_seen":"2026-06-06T01:45:51.849661Z","last_seen":"2026-06-06T23:51:55.914172Z","times_seen":3,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/assets/M0a4CSbmA0CzErJe6F.png","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /assets/M0a4CSbmA0CzErJe6F.png HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:24 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\netag: \"6a2034c5-1091\"\r\nexpires: Mon, 06 Jul 2026 01:45:19 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 79204\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g1WAo2RP3csZ%2FsOgp3aF2Rzfs1hij9rFbTGL%2BAaaBeMz%2Fy76JqRGSHiZDWAkL7E1KwpXV%2BhkmOahaQajid%2FUCUDBcqjTeNcBqE1%2Bsdh8IHuUzVh8kEo6Kdt%2FKJdEUQ%3D%3D\"}]}\r\ncontent-length: 4241\r\ncf-ray: a07b4a5d0cb0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4241,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"a2cfe33d40c91a8dbb4df099960e871d","sha1":"85dc9beb6ef991585ee4f8c30dd996720d80753c","sha256":"55b82c1d547ac5f6cf746a504fff5e4c808a25bea1c55c25fbe487609974eeb8","sha512":"83b35eb49612bfda91c892b322a23d927f9abfa111a638a4596a824e960fd56c69999009d88903423af4e06bb3dcba5518884d40559c26bb2bf612992805b83c","ssdeep":"96:C/HO9GwrsqSGJl3/njD6qqYZIljO3+Eg10JxLRH606Kl5HVzFdTh:C/u8wrSGvvjD6QSVO3JJxFHVhdTh","tlshash":"4a917d8911f49c97b0d12f4a18c9882151258fee50c6d2f627147542e3f2e2ad7a9af8","first_seen":"2025-03-16T21:48:34.854013Z","last_seen":"2026-06-06T23:51:55.907184Z","times_seen":15,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/assets/y30RiLsc2F5Qm11FiF.png","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /assets/y30RiLsc2F5Qm11FiF.png HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:24 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\netag: \"6a2034c5-10ae\"\r\nexpires: Mon, 06 Jul 2026 01:45:19 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 79204\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DORwlCoQ8ANdsJ70noKhiGNgZBb3ays41j0eI2c3OED3gH%2BQO5LpkwR%2FmTDPTO0UEkxwwCS7wD4ZLI8qwso8lXUhDJ7Fx4DwHhFgwMF0mAoTd7Ul5Ki5ijE0MNoChg%3D%3D\"}]}\r\ncontent-length: 4270\r\ncf-ray: a07b4a5cfcafb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4270,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"dab07e33ec81f43b54482db28b170690","sha1":"9c06b89b4e6df28aa5b0dc88de3e6739f3700864","sha256":"d4d874b6263722ddc2301bc54592b9d26fbf3c57ce4689890b9118dc80aa4c89","sha512":"485e464695e91c9d59c7c0bb7436cb566d1751466619137bf14368bcd01c9163e2d4c63a9bceb15028177fd3c2c25ccab152ebdea7a2e049ff819b467274c805","ssdeep":"96:S3+Yzq64avcpetBSFh+REXPXPRhDbUxHc3PClBqoLoF7l8UWO:rY+64aEpiSFh+EXPXJhDbUllBP280","tlshash":"c3914b789a107c16d029ed0bc5b762a519df0f06ee20086a628c3ddf1379e449ebdec9","first_seen":"2025-03-16T21:48:34.832454Z","last_seen":"2026-06-06T23:51:55.843294Z","times_seen":15,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/2.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.63","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/2.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2456\r\nlast-modified: Tue, 19 Oct 2021 05:33:54 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 06 Jun 2026 02:26:47 GMT\r\ncache-control: max-age=86400\r\netag: \"bdaeb947a2eb31bae0a170559df9013c\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: -KwJD4hLO2xMIAQZbExRmOk7cb8Xp9UzGHMbh2Sskj-6F0nKQ5m6CA==\r\nage: 76722\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"bdaeb947a2eb31bae0a170559df9013c","sha1":"7fc8496c9bf51eea98dc9060262f87a792a24a43","sha256":"3225172adc122cc7f8f09fbcc94757061330651a485f17091f41726767f7ea3f","sha512":"710a1ac11f6fdb3915479bf6b9eccf34f4dedd8f30e6bed5275f52d1ec634a754b252e385eb9cd388a5a69c64aaf5818c13cb783090ae68a8696af067cb67341","ssdeep":"","tlshash":"9e512b90d3f3d98a7d930935f8b27a34cfda87da97098523ea834854e279442cd24943","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-06-06T23:51:55.876591Z","times_seen":18319,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.20268-tg.cc/upload/img/6a203c32842e.webp","fqdn":"api.20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /upload/img/6a203c32842e.webp HTTP/1.1\r\nHost: api.20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:25 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 03 Jun 2026 14:37:38 GMT\r\npriority: u=4,i=?0\r\netag: \"6a203c32-19d28\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A7rBUbJmVQfelw9BCKoNUVx8xSFVNtWTe9HdF0DKRv5T%2F4MlG5doBzbicy16rU5HfNac%2FiSKVWNbX58Bhe6VCYgEge0xXd8joefKGAoItymW8H1KUOr2%2Fdq%2FEg5rDGTNMCs%3D\"}]}\r\ncontent-length: 105768\r\ncf-ray: a07b4a616d2ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105768,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 911x352, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d1247cb9bd9ef38213b7f915c78219c5","sha1":"adab736a212b0bfc97aeac2a275fecb717182796","sha256":"680a6eb5a90e4d3ccd1b47dd00e4df27595b65b6dce3e9f8efce7cd9efa76895","sha512":"c566fe2790f42aa72a88ed26cd12e13d487719f7ea246e75027889ac0ddd216f3180b3bf0f7623017c870bb76f6813bbf0e0c6aea27714dde25fe367162d9bcd","ssdeep":"3072:gcRySDv/YWuiJpvOHr6yW34qmeGkzqypB7geoaO+zACFK:5/YW9rWHqIqm1kzqgCVaLRFK","tlshash":"c6a3021539f74839c6b275049a39da42e5670d0bbb3185b3edd5380ecbf7640b81a2ed","first_seen":"2026-06-06T01:45:51.872414Z","last_seen":"2026-06-06T23:51:55.886388Z","times_seen":3,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":326,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/assets/kcyEm48teyDN-in7Ac.css","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /assets/kcyEm48teyDN-in7Ac.css HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: text/css\r\netag: W/\"6a2034c5-ca\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LdcSRyr2TudMSBHX04InSVoLRtbAzJSL84C0MILe6BUPP3fl9Bhg5mRe5B5iUXspMF7bN0Naym0KwCbWdvSI1l4B8tY6PlCoOYJu%2FwIt50t7%2Fo0jQI4aQGgbjdkJRQ%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\ncf-ray: a07b4a587bfeb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9cd0259b2ea1270774b0bd885f3d6a59","sha1":"2bd73d35751da067cec030ba8558d8e1e0e08bce","sha256":"123bec169a48a47aaeb0595c6cca642ddbcbf14d78104b15cb8e836a746ab3f0","sha512":"77b2837f18040e9f7b1e3b229243a4863dab9406b64795e9227631334fe7088a19830d6dbbc9867efe8cad2251a8fc9ed6616a9f459ecbf02e5ce66a5516a26f","ssdeep":"","tlshash":"00d0224c2c40f07e29c431a80f0842dc08992204ff035fa43124bc3100ca6f62037c2f","first_seen":"2025-04-17T13:49:08.709612Z","last_seen":"2026-06-06T23:51:55.912158Z","times_seen":120,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/1839.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.63","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/1839.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1387\r\nlast-modified: Thu, 17 Feb 2022 08:19:34 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 06 Jun 2026 05:19:50 GMT\r\netag: \"aef8727bea8367cd9fd252c025b45887\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: R_RWutJtSZMj7iuZh87rdJFsVC6R873nq4pOctLdv04flaBbtKPebw==\r\nage: 74079\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1387,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"aef8727bea8367cd9fd252c025b45887","sha1":"c2ab9d909455bff35181dfd92bcc7baba930867f","sha256":"ce5a07d36768bcb5524044a9e92a606ae6effe1cb0913dfa418703461db62fe3","sha512":"5f97e368e23aa5e501e57917aea9426704ac3c4068b34d803f44944663bab45131170fec2872fb868a5faceb6856ce4d9f8870053aba7e8d08455989a731984d","ssdeep":"","tlshash":"5321085f5b644577dda94dbede05a54b29e30d208d978bc2c404ec1534598a643608ad","first_seen":"2023-05-06T05:54:57Z","last_seen":"2026-06-06T23:51:55.890599Z","times_seen":14530,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":100,"dns":68,"connect":2,"send":0,"wait":5,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.20268-tg.cc/upload/img/6a203aab6661.webp","fqdn":"api.20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /upload/img/6a203aab6661.webp HTTP/1.1\r\nHost: api.20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:24 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 03 Jun 2026 14:31:07 GMT\r\npriority: u=6,i=?0\r\netag: \"6a203aab-2e86\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q5YyAzx%2Bo6fGxofp8OCUDIzESTcTXfYrq3wuYmQRzbUo01byAlB2%2BlBB0CLe5mnLwdMYkwpzEfSOG6t3jbMvaN3lOlEbHmz4vhlLMWq%2BnQdBCpLrG2%2FYmM%2BD2Pdmvkv8g4c%3D\"}]}\r\ncontent-length: 11910\r\ncf-ray: a07b4a5b7c75b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11910,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 238x220, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0b9da410678ac7ab93a1df3c5237c0b1","sha1":"e82c4b007509aa6504fc2f7b5241961c88d366f2","sha256":"0ae7cf9416b4cc1411b502ceb7f75d62dc09d39e585dce8e31df710dce4216b1","sha512":"fc4e5807bfd839c5abf741d186ac8f960ef3bf93e91fdeb98aea9350d1c311bf6cd14969385d4f15bbe9354b06043c2fccce096f52af24f0cf3c8bea87297c82","ssdeep":"192:n2j24IPEHooqPcJdx4Ie53t3LOCY8wULHBvPIFiqu16gmUChd46Aia4fHL8vEm:nr4Xq0Xe5d3LO8PxvquszNduiZHpm","tlshash":"4b32cfc343c6310feaeed0a59c1490568b2be8f85d50e9dd45847e726c193bc8bfc694","first_seen":"2026-06-06T01:45:51.939617Z","last_seen":"2026-06-06T23:51:55.88974Z","times_seen":3,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/yWdBPusINArYcHO7px.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/yWdBPusINArYcHO7px.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-a5\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=20B%2BFStkYsDMoqfgaihc3ZCQQTHcGXvlIb1iILactYHW1UCMXFIiA1bLak2c1Pne6Xuz8E697n4T%2BJ4yi8b5to8OB3Np8coZdN7DqDxzntx3CpeWcdRYZwGpqZdxYA%3D%3D\"}]}\r\nage: 0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a07b4a5c3c8ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"2b593e94ed32cc7aeb47c7593e66a872","sha1":"b1df1a84d07b84d3027a0c1e99d99f2a12c2ba2c","sha256":"5ebd8352ace662cdfc522ade70889dcbb0b1ecc34965a9ccd744dee78d58e719","sha512":"4d5bce45e64125b9b88d2738cbc79441683280ec73f79a2c040fa9fc2fd2d9d02c7c72504a4744b7a74155d0de1335f3a3f813e583088e6d45c4b2cc8d7c70c0","ssdeep":"","tlshash":"34c08c47b44682e0921a0c88011a8d821e250e9823469fc080496ea80a710a8ca8ba2d","first_seen":"2026-06-06T01:45:51.924309Z","last_seen":"2026-06-06T23:51:55.901102Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/52.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.63","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/52.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2330\r\nlast-modified: Tue, 19 Oct 2021 05:35:17 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 06 Jun 2026 02:15:14 GMT\r\ncache-control: max-age=86400\r\netag: \"39edd8e5c80256300562f68afb1ab525\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: SJSPF--3j8O7jciLd-l2ErWlHre-I-eLlfX98QvZAS_Q3Z76C0FHSw==\r\nage: 77418\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2330,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"39edd8e5c80256300562f68afb1ab525","sha1":"506e80486e2b9e90f7344334cd95e93ac8fa0338","sha256":"cf4c3c2ec18de3d4dcd49151ffe00cb299f86fc98467cf806b9c447467935479","sha512":"029abf77a53608d0e0a92ca7764bbed17cf0960e540fee5f8eb0a9cb1bbbb490e730ec22e8dc186b07b784cd87410f5667207c22478773346d725579673e5e2c","ssdeep":"","tlshash":"a3410ad884a0624d2924177332a3193dfc6d3f949a066dffc81d563c84a1e8271b5d64","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-06-06T23:51:55.851408Z","times_seen":16162,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":101,"dns":65,"connect":3,"send":0,"wait":5,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/cx4j0d9lRPD5f4ws8Z.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/cx4j0d9lRPD5f4ws8Z.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-2a75\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DU%2F1aZUDkzs4c41gVw3fsNP%2BK5brHvb4AfTNFtPaXk3MBB0cdMSH9r5GWjYOjoZ6Xv9A35wugZ5uxsE6dphnyjOs3xW6ydXBSDhPYoMgGsrT7BTmbW57hTBR%2BEWFxA%3D%3D\"}]}\r\ncf-ray: a07b4a589c0cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10869,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10868)","md5":"d0abb7d0c9f1304bb4bce4e6c9fc6948","sha1":"faf8e46d930003ce97fc01d10d9043551c51f629","sha256":"6c7ae12d7856e44a9e48909ab24472f119e77bd4186998859742b2d88b895248","sha512":"3e96f8d9424badbf70da381688f5ce7820201df31dd42b4c493cbf10f1f0be95f21b211c81b192deb2c01c19a4df5cddea6e394f9bc58c02b0f906ce7f1c5e6e","ssdeep":"192:/DgmNPNXNXNGNxNzNDN1NXBbnBMNmDPA/IfOSqITWnlHO5laVPK:/DgmJRBQ/JxDHyNwPA/I/9TWdOe1K","tlshash":"ee2240a6df4fea0b472104c43b27ba9daf5e2bcdb0ee4583c3499c6c5e0ad546606970","first_seen":"2026-06-06T01:45:51.852278Z","last_seen":"2026-06-06T23:51:55.901993Z","times_seen":3,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/dlovnVzDC84M3VPCD8.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/dlovnVzDC84M3VPCD8.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/HOCBFsKgUHNm6zEJV3.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-3bd01\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2BSlEkmW6uIdsGwWcSY7iYFeQwZ6mUjjFq%2B50v01fsA%2FPTCDmkhg7RKTchMaRGe322ViAnIzp3Zrr5bfvOmV7U9pwtVNwboYwHsDs4iGwuKWJL9mmeCOrPmONf80qg%3D%3D\"}]}\r\ncf-ray: a07b4a5a2c46b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244993,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b9ea69441deb48febdc18279c54436e7","sha1":"bd26fc9dc60326324fd84b880b6705db016e2e8e","sha256":"7da70c5ef3a5ecb496522b3be7b516dc1b6e127756f264c9b5ee43f81a9a5c6c","sha512":"3a5ecc95bf47e6e22399e227995f10cc90510379cee956b240e92f6588d9d20a7c873e7c56656e7984c590f0405f3442d841349b325c270c98665b1f92c066d6","ssdeep":"3072:WD7VOnZY5kWoH6J+2JfnI2o8Xck/7CrmxUxpMIt2kN3nT8Q5f4a:I7VOnm5AH6J+2Jfn4531l","tlshash":"b8344b51640beb3ee4a3588d68491800380d4feed51d9d66f2fcb627abc6cb0573e768","first_seen":"2026-06-06T01:45:51.938433Z","last_seen":"2026-06-06T23:51:55.855015Z","times_seen":3,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/1.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.63","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/1.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2691\r\nlast-modified: Tue, 19 Oct 2021 05:32:33 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 06 Jun 2026 06:22:40 GMT\r\ncache-control: max-age=86400\r\netag: \"2edf1ef8b333c40979976d1a49bc234c\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: ouDWI2U1TdjLm9_6UpAX44cyqigLTHU8a9jEvtN7iwpUOADHbUYVCA==\r\nage: 65155\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-06-06T23:51:55.916326Z","times_seen":21652,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":104,"dns":74,"connect":1,"send":0,"wait":4,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/3iOMgs09TklwNTYnBO.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/3iOMgs09TklwNTYnBO.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-fe2\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pV1Q8kUoeh71HKlbEiOLs0F80dAWPwmdEwf86yEotyAqEer2JePzGNbRBieC7yMY31Ru5XOgjtIYQT32e1i%2BmI8MOj857T3EFgCZfRKkjyQNRxmsORfmqOKbBanRqg%3D%3D\"}]}\r\ncf-ray: a07b4a5c3c8bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4066,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4065)","md5":"7b59f0c68ffe139b00e7adead49363e0","sha1":"e9f784d4d7f187d5f22d2cf5c78f41d183db223a","sha256":"28af04203140fd9bcd034b9fd70d7f970e97c70da2a155bec2a33768cf83ab20","sha512":"a6820614b8a7ccaa677041c3e744fa95db6952324b29aa1c3b907077b1f615bfff8a79f2111816c36f6eaaa15ccf3620ee4539920d481aa19c017a66c90e5b79","ssdeep":"","tlshash":"9481a644b857d638c0fb58a8c1681051b2b46fccf0288b85f2fd392d03869f09bb9795","first_seen":"2026-06-06T01:45:51.884691Z","last_seen":"2026-06-06T23:51:55.910727Z","times_seen":3,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/aJaUfz9iiXBWEgg-N0.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/aJaUfz9iiXBWEgg-N0.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-1cb\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQeg8T8qg%2FQHZvTTp%2FGMWsqydapEoqhoDYSd15kv3i8g%2FFYQwq05lZmndDjeM7AWvL5Ym6WfHfAzOceZbSWPz7KA1%2BHIhacKeRF6R3F8NxP7QrC6N%2BlwkpyPAx2rTw%3D%3D\"}]}\r\nage: 0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a07b4a5c5c95b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":459,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (458)","md5":"1a7a3c81121d1a2abc6d2402e0d12f34","sha1":"6d63bd481ee2040bc0f89452c971f10ddecab02e","sha256":"b2572512885ec45e7f1fc2e4cfaa07fd581da96d47315bab87b5dd9142ed4113","sha512":"47e678c5d62e0af707dd2641db9269133aa8b00294317c194100c7bafbde361f49dc11671ccf71083357b751e5ae706bf554aa3835794467bf94d0e3cb180fd2","ssdeep":"","tlshash":"61f05c0eb469d17c41fa1c6d4840014c17724f9422d161cdb13f1dd84a34ce2d6a6c29","first_seen":"2026-06-06T01:45:51.900794Z","last_seen":"2026-06-06T23:51:55.835385Z","times_seen":3,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.20268-tg.cc/api/home?rts=1780789524075","fqdn":"api.20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"OPTIONS /api/home?rts=1780789524075 HTTP/1.1\r\nHost: api.20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-lang\r\nReferer: https://20268-tg.cc/\r\nOrigin: https://20268-tg.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:24 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://20268-tg.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-lang\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rGdDNDpoAfyO6EiwK63%2BSlxkbkhbHxfrO4PC0Uqc9xnor9%2FH%2FxW5vi7B64er2RCilu7T32EzC%2FCFW0MPEJ5pcuHCR7Uphi9zTeoBvDYkJL53IA%2FFTKhSGDpjImywl%2Fhk9kk%3D\"}]}\r\ncf-ray: a07b4a5d8cc2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/5426.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.63","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/5426.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 3759\r\nlast-modified: Thu, 25 Jan 2024 08:50:23 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 06 Jun 2026 04:21:12 GMT\r\ncache-control: public, max-age=86400\r\netag: \"8634cee42b68c501da8d76beee00bf86\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Pj8W09GnBzhx4JdMdDD_N6eq7dmJF5wPaaFpKKvz3hw5bAIebyGCGg==\r\nage: 69860\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":3759,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8634cee42b68c501da8d76beee00bf86","sha1":"346a50344174ec7c53cdd48080a55f7cd3a7c164","sha256":"890b9f9ed3f5ab8390b86f93b5b8ba0c2d5d50a5dc21668734b3537bc3a65f53","sha512":"405e62a3f1c24476041f90ddb5e50801693578a1b3e108919edcde05bb429bad77fc60b0096adbaa9a2704835ebd7dc165720ad0a14ada9498b3234d361ef259","ssdeep":"","tlshash":"fa715be58e8349f8b5ce461d652892f55cc24943d9f987101ee467921800a82f0a90e2","first_seen":"2024-01-31T18:12:49Z","last_seen":"2026-06-06T23:51:55.882372Z","times_seen":1905,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":59,"connect":2,"send":0,"wait":7,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/EmSxZazYwNBEWLZIlX.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/EmSxZazYwNBEWLZIlX.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-1007\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gp9wpYLKdxDKJTUBgJb4kGPrAZujxzdwWbNtbMTHNESIRI%2FCef%2FZUAf314f8M%2F9z8gcXULCK1QkAIsFi3%2Fr2kjYDQCeAx1SkY22oc5qeTivjkNV431RACAms3GRjag%3D%3D\"}]}\r\ncf-ray: a07b4a58bc1db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4103,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4102)","md5":"4a90d53048319ad35a3cae4d2158b8f6","sha1":"19c2676d0b4c5e26c63f90bdb389d6a1e69dee7f","sha256":"43b8ff164551996ea5ee84dab4b42574159a19df7615666c55c656b99726e990","sha512":"0369077f5b22dc41bb71e3a8433fedec8b566fe4306606150f54e545a3053b4c7c7f34f2473ba761e3784a03a2b3014e8115071dc0b50bc49356559390b47619","ssdeep":"96:AazdRuMfPzqfcSFuxEY16+NZgLUq6zfemq6Y7+t6k1YU6pJ:vzdR7Pz4cSICYyUh5Ghr","tlshash":"7a810088781789fc84ed0624ec1764d0a5cf2bedd03409a1b0fedd1626d69a0cf96bf8","first_seen":"2026-06-06T01:45:51.908896Z","last_seen":"2026-06-06T23:51:55.856744Z","times_seen":3,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-06T23:45:20.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 06 Jun 2026 23:45:20 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J8PJgTmUzuJ3j%2BAokxa7qA%2BxngccCLG3MD0q9f%2FL8BeD8EskVBsRqJxG4Tj21wrN%2FirPT8A21VnYj0atLAKZoS8uCyP8T2MCpFMVOYRZPMD5PTDNcwlbiPBGgLX1mg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\ncf-ray: a07b4a477e4956c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217293,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (58107)","md5":"e4479a99e622022bba70281c76d2714a","sha1":"37b5b2d9d7a22bb61a3e7bd4703ed6c8cd07156c","sha256":"4f1fdea239d679ac3023fbe3dc9987348fc9c17db549e803502899133e8b7b4e","sha512":"4f64d5fe8ec396d8f1f9589cbee1db2fd5092fd8425696b9b0dbc7532312854df78e4a85a89f93f93fb60341a93ec7a7a13f93529a17af155467d905c544f8ac","ssdeep":"1536:fSfHQ34OOb+GsPO4MD7czwKCfymtGKnXWpV9zWblHoyGrmVcxq605HJjPxRfoowx:Z7","tlshash":"2e2428a153e0e2d8f755832dd5316c3621bf34ea7be0c28cc8cd6677aa1a8c9451cd6b","first_seen":"2026-06-06T01:45:51.929653Z","last_seen":"2026-06-06T23:51:55.912833Z","times_seen":3,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":28,"dns":12,"connect":1,"send":0,"wait":329,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.20268-tg.cc/api/init?rts=1780789522363","fqdn":"api.20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:22.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /api/init?rts=1780789522363 HTTP/1.1\r\nHost: api.20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://20268-tg.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:22 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v09mDom%2FjsmApZyOLjen5jXkxRFeYMdI9ATpYWQMKgRtycWVOplqhfkwnzvn60e9or8Fxu4KE0Sj8wOt0s7LiZDxBOCI%2BKZ%2BP%2FzjSeq4vVYpnzLZvuUMWYJPsqwDnFDEfy4%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://20268-tg.cc\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a07b4a52fb64b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6675,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (6675), with no line terminators","md5":"28b49637e9e4adf29171d7b9694e776a","sha1":"13a5eed066b42000dd51652144b2197bd00feada","sha256":"45142c26a3d2a0ff1de1889b85681edf59c2dd5f70f621162c380da41903b9c8","sha512":"539db4f2653a14c9bd84aac1f6ba463ae82b13ca502c8969c54542f1202ee951422fdc027d2d4d5856b4f094a04ed411218f3a0bdfaa7659d561ed4d6d4e9576","ssdeep":"192:py/k8VUVaFeU4W9Sgyii8tvx/TMUHIiaKjt56sFdd3:wchVaYNibzbHH5jt56Or3","tlshash":"6bd18da1438efe3848a940f74e3e76f5a2d29cdd308e5b7067f2d82a2156b309611d71","first_seen":"2026-06-06T23:45:53.36553Z","last_seen":"2026-06-06T23:45:53.36553Z","times_seen":1,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/ZiGGOXcg40D39Q8g-a.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/ZiGGOXcg40D39Q8g-a.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-d2e\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mMvU4cujALMZCpTKDD%2Fej20nbR8EuO0HGCtbNnE634upjN%2FLarY5AUhH5%2BZAWzHumAfuTKI7rZE8rwgAJkaCreoNj4hqm6ldiTkyRhdYVzOGgX3Y8HaI%2Bwj3aG5HEw%3D%3D\"}]}\r\ncf-ray: a07b4a589c0bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3374,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3373)","md5":"8dce6c03eeb476cb81c0f5f7e99db834","sha1":"dabb0c11bb0d7767c01e7e2cb1c30792f76d90ac","sha256":"d15275965e55c9756498535b6657d3f5ece16c1f4eb843b83334b5517bead9ba","sha512":"8805bd650fbb812111188138eab078f8f8c0d609ea9a442d801ffdeef0ff4aa38cfe0f9b29ca42e04e7815a7e682effc738089a2db5a4eef3b82196e75f5260a","ssdeep":"","tlshash":"a461e829fa88503993e3b17414e14cd141365f1028c2e6efd2570c84273ab90b3dfc67","first_seen":"2026-06-06T01:45:51.906236Z","last_seen":"2026-06-06T23:51:55.850474Z","times_seen":3,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/Wrg0OYHDZ7C1Uy1V8f.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/Wrg0OYHDZ7C1Uy1V8f.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-4f5\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DAOF%2FypzDal5%2BQGtyEtNKQZHoIj3CroA7uSUi642rsr9pwfI%2FX3tuGkSTzZ5AxGSf3RO02AIC9bvsOzBbKEtXTnGiYEqCrtVVbSBqEfD1%2BgM%2FZkFxMsXCCt7xZrQPA%3D%3D\"}]}\r\ncf-ray: a07b4a58ac16b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1269,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1268)","md5":"a7d5ed6f2b1a0d4cf04a10c2f6673744","sha1":"6ca0569db854151b5b26c60954a1664e44514ed9","sha256":"a14e68372723f42c4fe5579fa6d5dd98002f264297ecea8f1272f61a11855a9b","sha512":"da0a13e4589b1845858c7374d11d7b93743cc6bb2b1670b033f536573d1ddcb65a136e2260cc112968e9d8317f3dcd59c54d0833b36cb57e358686a6e8ab1e3f","ssdeep":"","tlshash":"e5210292f08df17d82ff39b6a85b5016c3615bd0336041cc77bb058e47269d1956ba1f","first_seen":"2026-06-06T01:45:51.91461Z","last_seen":"2026-06-06T23:51:55.834169Z","times_seen":3,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/A5N3lpU50aaSaCkf-j.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/A5N3lpU50aaSaCkf-j.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-2043\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wfZjwuu%2Fy%2FuM4cMlDM5Z2i7equoGwf0G93YWqyp9jN4E5UKy9Mo%2BO7ijj%2BxlJQk6iC7uQNtf%2BEcX%2FwiLGtF2won0uXq4F1w8jwfF4Mbu6vqoQ2XpTx%2BxvpCoyfSyBA%3D%3D\"}]}\r\ncf-ray: a07b4a5c7ca4b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8259,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8258)","md5":"e7b9cdf9bfea7d435c1b711f41a0b86a","sha1":"daf731157da7368c7cf0a0b6e121ee6ab9c4d814","sha256":"4b774f93d91c08b7f26767201fb4939786587724b4b21fe21b4f75f54bb43525","sha512":"47eff903b3ac39d4420e25bc71a54ca6fc7c787f3b3e6dc0cdfd54285e24c953e36d768265358085be849eac91a52601e80fe80e29293810cb03f7e47b7e9eb1","ssdeep":"192:eISXv41iP+N2sNONzDnVTDQQezJs+FNQLO4evdNLmK0xoHpKkY:eI71NZwBBsQEs+FhZ1cSTY","tlshash":"f6028ee71401be7e57e283bca66c34145c77147f11fd223a2e4fd246b589122b18d4ab","first_seen":"2026-06-06T01:45:51.869353Z","last_seen":"2026-06-06T23:51:55.853521Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/1958.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.63","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/1958.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2699\r\nlast-modified: Tue, 19 Oct 2021 05:33:52 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 06 Jun 2026 02:13:43 GMT\r\ncache-control: max-age=86400\r\netag: \"739797800c1ad83ba9a3cdddb9824693\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: p3-TexlZatn_OvOm1s3cbIPdkscJobocQcyb8xywiij6iqZ4h7a8AA==\r\nage: 77507\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2699,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"739797800c1ad83ba9a3cdddb9824693","sha1":"8fa44745cb0a87a781317153ffebcca127e4c498","sha256":"6de001279f8561ebcd5da21d426f25f0f554b5f665638e84b33876a079c56c52","sha512":"25ec9a6e68a3024e7054c566336ca457a8116c6d29c5b2a901c98ef4d1f14c0adeb8ef16f56bd8d2e07466ee81c0146adc992289efce6a9fa8c2796edd4c0fe8","ssdeep":"","tlshash":"a7511a5335d2fada77c981c3f942215cc720d62d4306a2e7b535078feb06861dba520b","first_seen":"2023-05-17T08:55:45Z","last_seen":"2026-06-06T23:51:55.895558Z","times_seen":1886,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.20268-tg.cc/api/lang_j?rts=1780789522731\u0026l=en","fqdn":"api.20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:22.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /api/lang_j?rts=1780789522731\u0026l=en HTTP/1.1\r\nHost: api.20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://20268-tg.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://20268-tg.cc\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sE5wA6AbJi2dbsB0i9ujvpBr7TQPyerxFtXhsJdttOUutcDS62hRx8eaQoDrA1xOuv9S3nEoP3kz8WXShHIAgHq5G0CPZVQyJZwHLIbjWuXPxVAfd38pTqDBmu%2BDyumGckU%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a07b4a551b87b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (31808), with no line terminators","md5":"ef178714ef51cf0276b2869868cb3a4a","sha1":"08f030949b3dd680eafe2a4e697f4815d5d3b511","sha256":"3c95b0a7f58386afa4314e1b3a34505a401eeb6d9963a704d6aec62d63e18c9e","sha512":"60cea9ebeafda06b0203e3c1fafacd2b792b5c0236ffbfaa8e298f4e72fe006ff85a3ae894a4a1ded3aaf56b2a163408bc3e4cf0733fe85e46000e2932e432af","ssdeep":"768:udx7p35IxaA9T9cBxr8qVTW/LFucnOAnjArtsSpcJtXKx3/Ygl0s:Gh5I9Bcjr8GTWzFvOAjEuNql1","tlshash":"dfe2f1d2a2c9335fed5a3619bc35841b44a14912fe7acbf09b352b6a009e54542dfd1c","first_seen":"2026-06-06T23:45:53.366853Z","last_seen":"2026-06-06T23:45:53.366853Z","times_seen":1,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":317,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/sd3xUpDSrmD_8wQR19.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/sd3xUpDSrmD_8wQR19.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-2c3\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TcEaOjOqhAGs1%2BaSHmHril4kTkvPfA5%2F3TGTERJ5ZGnIsQ88YUT2eFa7S%2F9EfPwouuLNLn1MyjyXX3utVciHv%2FLX5vGQ2n5DfpCOHEIISeQK0E7PVIQ4y%2F1ChkJBdg%3D%3D\"}]}\r\nage: 0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a07b4a5c6ca3b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":707,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (706)","md5":"183da5351f774e4eb7f7b40a0c3d280b","sha1":"9aeb53bd2ea95c823faa003ba5f5c12d82617c32","sha256":"2e6dfe5abcafafcd83b850e264e64249c6395e7360eeebbe372e4f9f4776bebf","sha512":"17dd50a3564b43636b21721e10717ac8a18ecc464cc942d9e376258e7fdd57ad1a5504c259129ce4da0c870fa319cc8f5423a8322343336af813cfe9e0907729","ssdeep":"","tlshash":"3e01885fbc5efdf8706348f514c61869310a4f2df67949c0e2b1173151d2410d01b74c","first_seen":"2026-06-06T01:45:51.876293Z","last_seen":"2026-06-06T23:51:55.839999Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/guB0uAjfk1tLqqJsUO.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/guB0uAjfk1tLqqJsUO.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-324\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2pDOfX%2Btn8%2FkY3airh0VDwtCrZn0In%2FDTlUoNYJZFOxu59%2BLvRPueX5ZBpgFVfxOEiL0OcxRAZjrPxX9QZmyVKiBlB%2Fgq91YpTQJBv%2FOCKokGt1NMrba3RsQQ9OVfQ%3D%3D\"}]}\r\nage: 0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a07b4a5c7ca5b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":804,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (803)","md5":"a7693b5d4afe2e608bc9c344d31a8e6f","sha1":"166326c8c39400d7abbf07df9f86f3343ce7f7fc","sha256":"82ed0de5fa389f4aaa57ffb61371606340cfd8643cc04e599f7d3436d0b51db7","sha512":"7359bdb90c7240904921e261e655ff5cb0b52e15f223614b26198717e59e6d45f36c3ca829eef066b2f5e0bb61f5ba7c73ab0ab46965545bfda0f67eee45703b","ssdeep":"","tlshash":"b2012502b47470d0b3bb0c81450509c166724b3a2742c0e0b51c4e83e67fea2c2f7f69","first_seen":"2026-06-06T01:45:51.895769Z","last_seen":"2026-06-06T23:51:55.875355Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/ScwkR8IB9WDfhpH18i.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/ScwkR8IB9WDfhpH18i.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a2034c5-693\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wh7co%2BNFmtwvhUbB3S9PFXwpVyvlpybvRlCLgt8TSWlrr%2FtYV40eDdulj6Oz7u0UjXo4A4jSYyzXccPZbYNqDEmWLNPbgb%2BA4YISZ067nZ0E87TFkTPoffCzV0GWSw%3D%3D\"}]}\r\ncf-ray: a07b4a588c06b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1683,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1682)","md5":"93a23b2e287fc35e0b18703a46fa82a5","sha1":"b065ee6393a9c020630b2aea2ee74401a91dc214","sha256":"6fad31265d8a53c314ecaa07d3b5f86c18e9a739800181a2a7b55a742768f1a3","sha512":"5164f66ef40c41e7963867345c555538afd5ccc30a13685c53101c7e71a58db7d472c02eee661500047ab5b8f795c8275232c246670a7ea2e9a1d3e6ed48c38f","ssdeep":"","tlshash":"e5316489b41ecfbca4b70c39650bc056901c4fdef236d745b0e8461357d6c78622ab2c","first_seen":"2026-06-06T01:45:51.899665Z","last_seen":"2026-06-06T23:51:55.879564Z","times_seen":3,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/3pcQdaRvwXC1o6YbPC.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/3pcQdaRvwXC1o6YbPC.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-9d\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w1rm67Kl2jzV8y9zKGwdZIN5%2FfKbh5EIAkv5eCmx2FO0XFkQCZrEmgzwdFAkBdvncsbYYTeAolA2fuSJHDwxgvEjmirywzWzGA%2BtHmRWMHUeIMEV7BLKC09A54%2BWfw%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\ncf-ray: a07b4a58ac11b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"7cd7d4af624aebd3dcf841f40526d8b7","sha1":"94f1e4d44c6d000d856c9361861edb4ce57717fc","sha256":"1d992fc6b3e1ce85aeaf57877c981aa95f98b59a3db5f519cddb6731ea462f37","sha512":"8158f3ec3df11aa08e4524cdc46daacf11efb6ca2a729f930f6c51c418ad452f75f1fe72680e393d9351dc7d7f259f71a4eacef4ae6dbea68a4b9b6b0f1bfae1","ssdeep":"","tlshash":"67c02b1e784d60f0865d0cfcc1174a7f53163e44332697f0a52d866f436a3261347f2a","first_seen":"2026-06-06T01:45:51.893187Z","last_seen":"2026-06-06T23:51:55.839122Z","times_seen":3,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.20268-tg.cc/upload/img/6a20354ea87c.webp","fqdn":"api.20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /upload/img/6a20354ea87c.webp HTTP/1.1\r\nHost: api.20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:24 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 03 Jun 2026 14:08:14 GMT\r\npriority: u=6,i=?0\r\netag: \"6a20354e-2e70\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sA1Fnk0jDkQ1KlewhqR3j59fDZp5Wv3XbCQHvUGtI1XwYDxWxr8Mk%2Fa83SE5kwxQfu7Ak9LVqRWvxyQfGUVzK3ULcpkSElVgn88rG1j0552YKI%2BXQeKEBfWh6BKod9i%2FGVc%3D\"}]}\r\ncontent-length: 11888\r\ncf-ray: a07b4a5b7c74b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11888,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 238x220, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"036f41941642fd43f881dc7ace49b99e","sha1":"42388ba755fe17f5aa6f6c8a72f730381a380249","sha256":"14c7e15e494d2a8ba58bb54c0e92858b44a4b082843f624882b6bf8c40065d48","sha512":"b070f40bb37c18a1d46da7e1f06df21e4b98da2dd975afeca2d1ba39b644d58cf196caf993f3ae94b0a444d84ef74e4675a6333f92891faa148ed77f8a2e1094","ssdeep":"192:Qt3P3z6V0HtoBXWR806cM+Y1cL2fm0tHS3TGQEjDRKnpyiPynVHmK2t5G6/3GUMd:+L6iaBXHVcpyfm0ZKTLE5KncVN36fGUO","tlshash":"9132d0923b467977ae82441e6104f1f683cc7d6ece1b4a6a6f11bd24e88d0d0e30225f","first_seen":"2026-06-06T01:45:51.925589Z","last_seen":"2026-06-06T23:51:55.838049Z","times_seen":3,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/assets/6AJEC7VsBXHZnsmNl8.css","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /assets/6AJEC7VsBXHZnsmNl8.css HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-607\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VYw2YY7GFdenNHRSgMEW6Z07VV6TiAUIB6jgfUuXhrkWrqh1GbBzju%2FuxD3qgrNj%2FbxBO3jC4pUTccPbijRh1F%2FKx5KjatCsWdkzAyafwvyFbBJa0zVK4gjP3mRAGg%3D%3D\"}]}\r\ncf-ray: a07b4a585bfab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1543,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1542)","md5":"bea7065a4dee9dbd717e65c14d54a462","sha1":"4684fce8a4c8bc918e71bddac39797b6ed50718c","sha256":"5fcdcdc810e936834ae1553c9780741d5d485d28fad604a4952f3c356dea31be","sha512":"fa56791355ccc686afc786f9f72c3d2df62fc9d39fcdfd420bc24889ae99e58a132f71a5bd406b5fe3b3003a270fb04692d00715d4342c8a0cc0acbfec12f24c","ssdeep":"","tlshash":"1631e778da5090397e12fde4d7d706daf23ca5614c1beb99ba58a160c3c37f41a23382","first_seen":"2026-05-02T12:38:56.04666Z","last_seen":"2026-06-06T23:51:55.894909Z","times_seen":17,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/Pvyr1Ls44eCQ2iGvVw.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/Pvyr1Ls44eCQ2iGvVw.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a2034c5-3f02\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MqTGxE6Evf7C17FoD9JpMXyvsMuBYsC%2FhXoBbWjrLf2iiu5JLg0f%2FM34pkVSnEbC1GeqCDjEzfuBlI7xzVfhpotpVqVo66nUsNS4cg6S96ZC2WKPjXkNSUYStMn5RQ%3D%3D\"}]}\r\ncf-ray: a07b4a589c10b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16130,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10486)","md5":"06d84ea9e0bc27a81f408f7ad329a1db","sha1":"fe7c465c8a115adfb54a95f9fa1ae97f8f74b1b6","sha256":"297218eb6b1bd1ddeea5b7e0940d17d22becf76fba086ac6170febed1f96923f","sha512":"b72d717783afcc3dbfe961168c818911a0b77942f0d9288c71a803913288efc0e0110168c6dbeccae97e95f210910775715352db510bfaa3fa416f06d59abee4","ssdeep":"384:fUHZBzU+Vr2NFDN3moLFj4prnnEFHJSR/xdbe3V5yeDrCUJ8fBHCT8PrS3U:SBzU+VQFDN3moLFj2rnnsHJShx5e3FD8","tlshash":"7c72f98679407032c7bb99c5d0d905a1672927c8f229c2d6f06e2d1b3619cb8f1fef1a","first_seen":"2026-06-06T01:45:51.942272Z","last_seen":"2026-06-06T23:51:55.898718Z","times_seen":3,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/JUTSvMR6ChBRYUpAzv.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/JUTSvMR6ChBRYUpAzv.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-61\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bo0s7LorPeUIlpVcCZmwO%2FELIYlkqt6ZSIiPxQ9FlgZSqfW6233xCHSITnb61VJK2hHpC9FrhnQUoUG5L73GmfKDqtcI%2BUH8seasS2Oxnkhd5JXOZympKW2poO0n1A%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\ncf-ray: a07b4a58ac12b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"3daf8da667e5e94fc3b77629f6ed9424","sha1":"bf7270ff9f8afccdbf0e345ee9c903dd238642bd","sha256":"e6ee91cbc86f4cc902de63d0bb67a8f5383d9440b82f30332efaf4c92c1f0e35","sha512":"77e1a178734db809d1e1c7288cec627bd83fb1cb1439bc81b427ad14de808ad67d72577b29d0cde4ac6be8892590521f2abc812bb1c548053935a3c9f449b2b7","ssdeep":"","tlshash":"33b0122f080810b099480c8d230c90230730192d33932a802218895d43591a2c14e655","first_seen":"2026-06-06T01:45:51.894509Z","last_seen":"2026-06-06T23:51:55.883977Z","times_seen":3,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/swiper.97D0xcXv.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:22.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/swiper.97D0xcXv.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-29304\"\r\nexpires: Sun, 07 Jun 2026 11:45:21 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=beiUijzWn4Ge8neBxcx2Qt94jXbX81dga6JOFUzRnPUcwNiK7Ebg%2FQX%2BeXs29mm2M7wt3l0%2BcyRLGZNV45Nd6wjhbLtiWgBbuPcQqgMQD2tQceDiZeLYFPC51wBEIQ%3D%3D\"}]}\r\ncf-ray: a07b4a520b52b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168708,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5246)","md5":"82975d67eb53caecb90681ed0c1b2f69","sha1":"6adad631ec9645ddd33fddebf6d1f751f85ec722","sha256":"40d5188099366d2198d6808424577f236659c1a01d412d30d6e9ff9fb5cb014d","sha512":"af56e91504aafabaef51cc89496c2706f6dcb72113c4302d87fa2a85b9071965bd32eaeb15ebf924d1d6df2070015f7b899c4b0fb0a6c88a7f89e4a014ea978e","ssdeep":"3072:X72LtwN8TgGriiXOlYYgFCPKE3WVcDhPU0s2usyko:XaRw8TgGripiFCPn3WVcDhPU0s2Eko","tlshash":"1af33a997250b13242fb19e742768111b37909497809d4e8b1ad9deb2d3b84812ffffe","first_seen":"2026-05-02T20:23:32.665218Z","last_seen":"2026-06-06T23:51:55.845362Z","times_seen":15,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/UTnxdiDPU8uprSVbh-.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-194219\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TEps2RzlJDRLmaTlSZ4mbDENCdtvuop7iUgkBi1MsAQfjVBC2f387B8r9XQ6GGjAtjLQyFEZRGUckMfkg02NfXBe4xxH1OGKTUixd8Qc74nkXr2TcgEnWdbMjuqFJQ%3D%3D\"}]}\r\ncf-ray: a07b4a588c07b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1655321,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (11679)","md5":"3c3003ef5881b8cf7908c38e38b52349","sha1":"66d65106800920358fc1afd3fc69fa393c5e03b9","sha256":"93f3a6ba5d90088ecf3a229a1d7802c791d96c2e08f211acab2b39fd985e0ca5","sha512":"b675da865aa927f1c14e3ca25849540d25b71fd2f3ebedc2b801aab8013b598d76c9d1509164db2259f50d7edf86ea440d01ead1d9d8ba0a63aa7b2f867b1187","ssdeep":"12288:mY/6uhew5hzcn/IksSLyTT2dH48LYl9a1b9JNU0B/d:DIwfzQgkPQa1b9JNv1","tlshash":"56251844a41bcabce8f361a49898a441b5693fefc115d116b2fc082727c7c78bbd97b4","first_seen":"2026-06-06T01:45:51.864728Z","last_seen":"2026-06-06T23:51:55.842415Z","times_seen":3,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.20268-tg.cc/api/cus?rts=1780789523226","fqdn":"api.20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /api/cus?rts=1780789523226 HTTP/1.1\r\nHost: api.20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-lang: en\r\nOrigin: https://20268-tg.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X0pjJ2aRL6qFVgrzj4AdLlLaNEd5Hkp2VZakWl7LgpezB65bCDApOnL%2B7gfqoW0MMiLG1K4QRbY9InVA3lIdIazo8fFkeH%2BHZOD2Pqz8y7XPyv6QkHQ5vtszTGUkmxGXWQY%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://20268-tg.cc\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a07b4a593c2bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":459,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (459), with no line terminators","md5":"30f9edf286b5a6436ef2c55268e3f4c8","sha1":"fc033f8a83e1a345c3f8189ac0c50c9249389ab1","sha256":"4227e9ef9a737bbbb1b0699cef5168331e5a026510102dc29f976eff414a5b1d","sha512":"234ac83b4620c4fa273d45c400909da5e0af03c92bfb9e7e8eb40a697aac10cb699b53d6d2929633a002ea6932e4d4e129c5a5b3484d6e919f81e6b42ac1e251","ssdeep":"","tlshash":"18f023e9b72327afb76ad75ab43c3f55825ce0788311d587a28054228885c1cb15392e","first_seen":"2026-06-06T23:45:53.372362Z","last_seen":"2026-06-06T23:45:53.372362Z","times_seen":1,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/UTnxdiDPU8uprSVbh-.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/HOCBFsKgUHNm6zEJV3.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-194219\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AZsgxhKcNd4xVczOdwDlTfIZOa9DtE1%2Fd2vmY8AbyQIJDXMHOuFKGfDDd%2BPWIeaDcpo%2BTH48ZhrMvRvEx3VOzBhL31j%2Btb0viyXTtffjMN2Jss8MuTJb21cDRMpwgQ%3D%3D\"}]}\r\ncf-ray: a07b4a5b1c6ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1655321,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (11679)","md5":"3c3003ef5881b8cf7908c38e38b52349","sha1":"66d65106800920358fc1afd3fc69fa393c5e03b9","sha256":"93f3a6ba5d90088ecf3a229a1d7802c791d96c2e08f211acab2b39fd985e0ca5","sha512":"b675da865aa927f1c14e3ca25849540d25b71fd2f3ebedc2b801aab8013b598d76c9d1509164db2259f50d7edf86ea440d01ead1d9d8ba0a63aa7b2f867b1187","ssdeep":"12288:mY/6uhew5hzcn/IksSLyTT2dH48LYl9a1b9JNU0B/d:DIwfzQgkPQa1b9JNv1","tlshash":"56251844a41bcabce8f361a49898a441b5693fefc115d116b2fc082727c7c78bbd97b4","first_seen":"2026-06-06T01:45:51.864728Z","last_seen":"2026-06-06T23:51:55.842415Z","times_seen":3,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/X3JQMLj6cumcmGumKt.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/X3JQMLj6cumcmGumKt.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-3a64\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B7rJVLT1zK7j6KFbmaRj4XsE8G%2FxosK1%2Fv8oefqV9aMLDc%2FX%2BWsmFqcphTwQVRZsaX%2BT6%2FYPshp78z%2FDj0BXhIMDI5VIwib0R08DLVv4Z%2F%2FGTfSsRalk%2BQnYZ18AhA%3D%3D\"}]}\r\ncf-ray: a07b4a5c5c97b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14948,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14947)","md5":"4b6718259675abb2f90e9ec59af03db1","sha1":"28395422bbfaad9cf49d528d3b89ad58f82c657e","sha256":"7bca131e84bd9ec5c53ac64ca15310b0702dfb83c93b89eefdcba8e64d52cfdd","sha512":"ecad0daa68620392005d9e048d51683eb6e4ead47b84cd3a656f28a65808d95db30462278e88b18343c14bf722cfb5bc88123da44a9962a6e4967a35b729ba0c","ssdeep":"192:oQ5eIDNnwkmJJexKjWHovWEj2V5IrscoNtBrNMaO7K+UawhZC7Jfk25mXX1Nkauf:oQ5HnQvhjQeWyFCrqaO7zUaP7Jf41ulN","tlshash":"d1629eb73b98d67acb702cf8600a55f2ecd6586f6ff54d84d89800a487e0c90cd5e782","first_seen":"2026-06-06T01:45:51.86203Z","last_seen":"2026-06-06T23:51:55.896234Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/assets/2mchdkSSF3DpjgxKey.png","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /assets/2mchdkSSF3DpjgxKey.png HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:24 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\netag: \"6a2034c5-103e\"\r\nexpires: Mon, 06 Jul 2026 01:45:19 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 79204\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8u9932GCVW2Kb%2BhgyCicOEiUBJS8dKQxNRPuwgiteStSvGsHmSv0WCwgxf3mfFkWji%2B8ydQs1R2SMLMqeOAsCT88jp8snHqsNsi1ygNotZhJGHzNLty3l48F0UGUuA%3D%3D\"}]}\r\ncontent-length: 4158\r\ncf-ray: a07b4a5d2cb5b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4158,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"a4c6d7d834bba7d4b88467d97e26dd9a","sha1":"230cb3e5a01e07d27b23080a41ff9426e7286b7a","sha256":"9ad34ddca7fa393b130ac3596433832af1ccb7ec63c97601192cd8311639043c","sha512":"f27b7d2c8c0e3bcfa8ee1c81d63552c6004cc74b5004900177f344c9d5650249cc46ef5522de6386e55d024d84e6196aae23a0a2aa10714cb6c2af82d5f7d0f4","ssdeep":"96:Y2qhL+AyGprndShF8/mdrxtmeLlAeva397BhetkE+l9XE:Y2uLyQdSD3drTmeyeg97+I9E","tlshash":"b3818ecd70461a00a7e6e3d7ec144158c8e95dc8db1c00382cad7eeea434b6c86b66d0","first_seen":"2025-03-16T21:48:34.814988Z","last_seen":"2026-06-06T23:51:55.885687Z","times_seen":15,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/assets/PbTJ7UGDGhDY97Ofvr.css","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /assets/PbTJ7UGDGhDY97Ofvr.css HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-7c462\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iFQ9TnfPGNezyiGNpyphTbh71GiYDU2UK3HXMPvsLylIIuoYiCeLD%2BAavPiqBCBPggrzNaJOUprtP3luj%2BIO359mGjfK3HGNg%2FtPNAuxvtdiu8OeRQcycosIPh1gpw%3D%3D\"}]}\r\ncf-ray: a07b4a587bffb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":509026,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"16086aa9bf2fb1a39ee6fbfa97993ea3","sha1":"71bc25f866754c5fe0c6e417fdde9702fea3c08d","sha256":"e96c01980af8c3b2a13827cddf90f7f198394f745bcd7e4f9d1d46f313819dc8","sha512":"b19ad1684335bd266547b5c971ebe7a6e14c24e81b1d780f08bbe5a9066bff2a1456d3033daa3236aaf5bce19d61026217f5c91f2db8c9c6de7f3cb10f69fce2","ssdeep":"3072:Ebo3mPtwgZPl+y8V5rhtVnu2nqJ+F17ysPtgnV4QbWUDsAD8eFNQ6/9oiekpsuxg:9WL+H5rxPXuyKD8k3ox2igC","tlshash":"f5b43a7c39582a3bb877c521316c2adc5c26b603e932869cea993438cddf6f3152f549","first_seen":"2026-06-06T01:45:51.84648Z","last_seen":"2026-06-06T23:51:55.84156Z","times_seen":3,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/3iOMgs09TklwNTYnBO.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/3iOMgs09TklwNTYnBO.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-fe2\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=md0HqykBfq16h01jlVAzkxRWE4Yyu6HV15XTDvxDzDOsnSff2W8bwi0I7PnzyA8iisJFXG%2B%2F9xFszeElGs6jr4qcY2tBXq3CeWgDsdW%2FbXwoqw68nLTcHeIxnvIzfg%3D%3D\"}]}\r\ncf-ray: a07b4a589c0ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4066,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4065)","md5":"7b59f0c68ffe139b00e7adead49363e0","sha1":"e9f784d4d7f187d5f22d2cf5c78f41d183db223a","sha256":"28af04203140fd9bcd034b9fd70d7f970e97c70da2a155bec2a33768cf83ab20","sha512":"a6820614b8a7ccaa677041c3e744fa95db6952324b29aa1c3b907077b1f615bfff8a79f2111816c36f6eaaa15ccf3620ee4539920d481aa19c017a66c90e5b79","ssdeep":"","tlshash":"9481a644b857d638c0fb58a8c1681051b2b46fccf0288b85f2fd392d03869f09bb9795","first_seen":"2026-06-06T01:45:51.884691Z","last_seen":"2026-06-06T23:51:55.910727Z","times_seen":3,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/sd3xUpDSrmD_8wQR19.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/sd3xUpDSrmD_8wQR19.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-2c3\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jlYrclgj%2BReyy75JBbU%2FvYYbDT6hw5Ycqkkf%2B9F0LMnetXtbe%2Bl7ka1B06W1c5xPP0n%2F6upGb6LzCRdkLFlh1N8ps2WPQG1yC1Hc7NVPr0kC5CGA00DKAscOiaabgA%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\ncf-ray: a07b4a58bc1cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":707,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (706)","md5":"183da5351f774e4eb7f7b40a0c3d280b","sha1":"9aeb53bd2ea95c823faa003ba5f5c12d82617c32","sha256":"2e6dfe5abcafafcd83b850e264e64249c6395e7360eeebbe372e4f9f4776bebf","sha512":"17dd50a3564b43636b21721e10717ac8a18ecc464cc942d9e376258e7fdd57ad1a5504c259129ce4da0c870fa319cc8f5423a8322343336af813cfe9e0907729","ssdeep":"","tlshash":"3e01885fbc5efdf8706348f514c61869310a4f2df67949c0e2b1173151d2410d01b74c","first_seen":"2026-06-06T01:45:51.876293Z","last_seen":"2026-06-06T23:51:55.839999Z","times_seen":3,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/swiper.97D0xcXv.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:21.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/swiper.97D0xcXv.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/HOCBFsKgUHNm6zEJV3.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-29304\"\r\nexpires: Sun, 07 Jun 2026 11:45:21 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=26im3SNoygvt8T2CxPTmi4p663cmYtM7V0B9sIcfwxynR1WevXdMWAttkHXw0Cf%2BNRsdjZppov8P554T%2BFqTXapHdDS5Oiw3pWNswh4TubYXDmFAiBgXJ7RSisAcUg%3D%3D\"}]}\r\ncf-ray: a07b4a4d5ae0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168708,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5246)","md5":"82975d67eb53caecb90681ed0c1b2f69","sha1":"6adad631ec9645ddd33fddebf6d1f751f85ec722","sha256":"40d5188099366d2198d6808424577f236659c1a01d412d30d6e9ff9fb5cb014d","sha512":"af56e91504aafabaef51cc89496c2706f6dcb72113c4302d87fa2a85b9071965bd32eaeb15ebf924d1d6df2070015f7b899c4b0fb0a6c88a7f89e4a014ea978e","ssdeep":"3072:X72LtwN8TgGriiXOlYYgFCPKE3WVcDhPU0s2usyko:XaRw8TgGripiFCPn3WVcDhPU0s2Eko","tlshash":"1af33a997250b13242fb19e742768111b37909497809d4e8b1ad9deb2d3b84812ffffe","first_seen":"2026-05-02T20:23:32.665218Z","last_seen":"2026-06-06T23:51:55.845362Z","times_seen":15,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":284,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/j4eCAO0VYlCYrq9yV8.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/j4eCAO0VYlCYrq9yV8.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-1f7\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=csJBPD2HI5ntReDTjMFsHPbi5z1izO%2BToDUae3%2BgwuFTrVrbgjekymU533i3lXu72YTAN5A5Z5R%2BeDNAe8OBrT%2B36CGiIoFSi2bI%2BaEHwj1VwW59VG7B1ItGDzVeqQ%3D%3D\"}]}\r\nage: 0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a07b4a5c5c91b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":503,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (502)","md5":"4a842bc5b5100338454f23472672b3e5","sha1":"9cf061a337cc893391f2bcb814ab1e7a82b28b82","sha256":"d37b1e186117d181014648514a217a26edc938148decc407b0ed2b8c9ea6ab29","sha512":"d4625e79e2366b664cfc4124d082a2c84457a41cb4f7d5cfffc18d401f52e51cdb126e30b3ff73bb62e5f3de4d731689d26e8941e43961af71a6a7dc50e3d8be","ssdeep":"","tlshash":"c4f00e6694ccdc30472ffa8c801872d1021ccab8c33042c8ec5e629ee3e9478c65df20","first_seen":"2026-06-06T01:45:51.867202Z","last_seen":"2026-06-06T23:51:55.893354Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/If3LiozMChB_A1xBdJ.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/If3LiozMChB_A1xBdJ.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=3,i=?0\r\netag: \"6a2034c5-1b\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nY7ET3YwXjaSTqHtpzyvLmK8oQFXcFb%2BUu9w%2Fnr1DgNQV5lzIN2IQvFnS2cTJDjMsB2wKIj0t9K1bfDbcFWtMy25gXzmYfxKqTun3VZp1hqHaP6Fc348aKwTmfPI0Q%3D%3D\"}]}\r\ncontent-length: 27\r\ncf-ray: a07b4a5c6c9cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-06-06T23:51:55.909505Z","times_seen":727,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/assets/RDODLfGgaCDtJZfn1f.png","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /assets/RDODLfGgaCDtJZfn1f.png HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:24 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\netag: \"6a2034c5-11c9\"\r\nexpires: Mon, 06 Jul 2026 01:45:19 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 79204\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qg%2B8E6diOFpAW3DA0kAZuPL36OuTA7C21Q1FwXb8mKblXPZux5Aoqif62rKiBbpNVVOwA%2FKGHkLy1vO%2FyrTZuUBNtYe9%2FKLvGOqQMimCa%2Bbi0QiXlfr2qvP6LeOK0Q%3D%3D\"}]}\r\ncontent-length: 4553\r\ncf-ray: a07b4a5d1cb2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4553,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"2771937007a2c1090d9f176c6d6fd50e","sha1":"141f08026a53dbe1d04f82181ff0d2a84234d351","sha256":"5e8fe6f699d5b809a2fdd93a31afb410bb398fb92c4b2f576991331e8480e245","sha512":"bf93ceb7e92d69d6ed87da92ccad08e133c933a91f57f657defa92324ec6579c4139752d17d301d69f1c0b03d71e180a43e869e52cb77f7a983d25c4be3a988f","ssdeep":"96:eStaAdGYhiCddSAIbqshvA87NZ6fGIxiJgzb5xQXjNs9LJNGK7:eStaAgiHdSAI7A7q6/5x0jQ7GK7","tlshash":"b5916c458e183c37cbd4919483866072ba4f2e5157d3c80abc8abca5a534515e6e37bf","first_seen":"2025-03-16T21:48:34.843929Z","last_seen":"2026-06-06T23:51:55.90299Z","times_seen":15,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/YZrxc9yUzoCbqU0IDe.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/YZrxc9yUzoCbqU0IDe.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-21f\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KZiOQUCpmTEU79G9F%2F96pXR1HXPOC%2B0IG2vnCY4L6mjy7zIwyWrbwbFd5%2BAfPXB99lFhnQSQDBbsovy%2BrE0aGfDQefTsWXNqkqcSOEPQt4YflqwoTg3Wt9BKdEKEWg%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\ncf-ray: a07b4a588c04b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":543,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (542)","md5":"2a0ec4ed95a3fb1bb968411b1895cede","sha1":"96ce24af5c47745ba9bded2d2d7d2f0c0e1859e4","sha256":"ad578cf879340635d17bfcf5d5921c5f8569ac38a01951a3707645ea805a4d89","sha512":"9e1e32c1221094eeeab39cf569d98bc86fa6f3339707e2f73e233fcf12052e9a7a89dff2ef86f151bc4223c5c4294b1a1800dcc6681ed6ed949575e2482eddf1","ssdeep":"","tlshash":"46f0200bd81582bdc5eb1d082843306120483eacc73099c4e2f925b2d3c2976e46ff14","first_seen":"2026-06-06T01:45:51.933718Z","last_seen":"2026-06-06T23:51:55.91495Z","times_seen":3,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/cE6Md7SFfkBLZ46nNZ.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/cE6Md7SFfkBLZ46nNZ.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-9f4\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=spwf18WDxvCwfV5XfFyk%2BQvJULLRqUtuUy7LuKnVf%2FMK%2BXS07vJ26yez291nS5WLilStEtPKyZzTPPo7%2FUkNK3LnkLg%2FG9%2Ft3jXpuij4ZldDyML%2Fmm81JoNd5b26dw%3D%3D\"}]}\r\ncf-ray: a07b4a58ac14b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2548,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2547)","md5":"20577e0d255c8f5d4f49a04050456ec4","sha1":"1c12ad5c045e46c1f0b4c6b4699604b3211d7af7","sha256":"2920902c3143a0eacd59b2988b3768eef16e087e02a8fec4e6441ca8b8ba4cdd","sha512":"840c389dff5de85147d903abb669e694d3e34ccec0879b31fe8fe55431eb3e798d1468cc58d3947770d42b305713784c6129eb0f735dce1d1c802497ad24536c","ssdeep":"","tlshash":"63516299f6a6503d8b7328f532e420c5561e13a0efb651ed501e2b004ba7c23bafc939","first_seen":"2026-06-06T01:45:51.932614Z","last_seen":"2026-06-06T23:51:55.883086Z","times_seen":3,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/MGzSXaUi56eVIHNsue.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/MGzSXaUi56eVIHNsue.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-316\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4hiEZtUyLUurO2%2FKgAp1h8rKrI6xJXc6DUiUnYNbIDH2fOSvDRTihp4Icl7uz2i3HKxeanebXnFp%2Ft18%2Fueyfr%2BryY%2BaQWHTdqjn%2FUytOpJu36WnfZ2XNwRLvWNoIQ%3D%3D\"}]}\r\nage: 0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a07b4a5c6c9bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":790,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (463)","md5":"330e518899a09c0fcb250ec0e0bcc48b","sha1":"b4fb0de70b2c1e4d23a840fcffd15f1895784ea5","sha256":"a032d965219a3243e088a45f5669a1c1abaeea2b71aafe8aad26dbb1db6c7c3a","sha512":"cba31c32da3b02244f5c1b0345997a43fb884580777f18e716d488c5bc2bd35a3397e2b98b17186937031855dee2880301a16f2f5c9eab9cb7116573f1eeaae1","ssdeep":"","tlshash":"2001258c58eacbf9c49702582d8a10a5d0506b4c9b35d965f05cad22638fcf095de738","first_seen":"2026-06-06T01:45:51.891621Z","last_seen":"2026-06-06T23:51:55.900196Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/28192.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.63","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/28192.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 9881\r\ndate: Sat, 06 Jun 2026 04:26:12 GMT\r\nlast-modified: Thu, 28 Sep 2023 05:47:46 GMT\r\netag: \"738e03afa4b65f63b78c3a6a4c6c332b\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b5699d1b7e44f0e87927693889ab2666.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 2-2zvVbF3drp61DtrKbhOwRSES3Xq3ilRIXCS6D-17_s_JMyjsdh9w==\r\nage: 69552\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":9881,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"738e03afa4b65f63b78c3a6a4c6c332b","sha1":"d14af15385da03855efe878236d07d41e9c56ec4","sha256":"c533e2f35a8581477eedf7775009aad7aafda3790e17ded722b5598becfad360","sha512":"90507daae190e73834f55c88eb6b0b6fa6a5b10d2debd697a1ff9dafe6edea58089cc5ed92f86815f591882f27b0a1e4386525c596f1845a863364e14df92f66","ssdeep":"192:CkaFRc4itd+dIx3oxLkHxA2vb20MySGZfAAUqMaJgOgcU3wK/SbJK:CLKYSRA2vZIGFU6oyK","tlshash":"0c12bfe201550cf0baf29e83ef94775a097cb65f73179a991360acd208d252e8f6d841","first_seen":"2024-03-11T20:01:53Z","last_seen":"2026-06-06T23:51:55.913583Z","times_seen":157,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.20268-tg.cc/api/adi?rts=1780789523226","fqdn":"api.20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"OPTIONS /api/adi?rts=1780789523226 HTTP/1.1\r\nHost: api.20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-lang\r\nReferer: https://20268-tg.cc/\r\nOrigin: https://20268-tg.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: text/html;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://20268-tg.cc\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-lang\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C68bNo84aloWGOjATPegEcJZrH6wFJK3fnSxW1Jvu6KT1E1p1nDOhKf%2Bgjdea6svLZTo41oECfCBkPGwCoLzPYfhb4MFCHdKgK3fIzqU%2Bt7xYF%2FbFhGHRuWA8i59vsKxBJk%3D\"}]}\r\ncf-ray: a07b4a583bf3b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/cx4j0d9lRPD5f4ws8Z.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/cx4j0d9lRPD5f4ws8Z.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-2a75\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FW7Gy%2BSKkFoRMASmH96QuyTbCl4GlBByvwSF22M8TcoezVwHTGaG37G82jzjGVCM55UjeAH9KtEePpd85MQgczH%2B6%2FSwt4cKm6uN3AGWwH%2BSjIcoD6Xy9jp1DMb42w%3D%3D\"}]}\r\ncf-ray: a07b4a5c5c99b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10869,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10868)","md5":"d0abb7d0c9f1304bb4bce4e6c9fc6948","sha1":"faf8e46d930003ce97fc01d10d9043551c51f629","sha256":"6c7ae12d7856e44a9e48909ab24472f119e77bd4186998859742b2d88b895248","sha512":"3e96f8d9424badbf70da381688f5ce7820201df31dd42b4c493cbf10f1f0be95f21b211c81b192deb2c01c19a4df5cddea6e394f9bc58c02b0f906ce7f1c5e6e","ssdeep":"192:/DgmNPNXNXNGNxNzNDN1NXBbnBMNmDPA/IfOSqITWnlHO5laVPK:/DgmJRBQ/JxDHyNwPA/I/9TWdOe1K","tlshash":"ee2240a6df4fea0b472104c43b27ba9daf5e2bcdb0ee4583c3499c6c5e0ad546606970","first_seen":"2026-06-06T01:45:51.852278Z","last_seen":"2026-06-06T23:51:55.901993Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.20268-tg.cc/upload/img/6a203aab6661.webp","fqdn":"api.20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /upload/img/6a203aab6661.webp HTTP/1.1\r\nHost: api.20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:24 GMT\r\ncontent-type: image/webp\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 03 Jun 2026 14:31:07 GMT\r\npriority: u=4,i=?0\r\netag: \"6a203aab-2e86\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=20JR4NDOg%2BYkJSZchj%2BXTw0bWgFUPA4Ss7W2WoyPyVuljjf9i4DsnkA3FH2e1gLuzloeI%2FPTDdrOAzdlbA7FtEfFlEmEYx9VM37HSUManbne%2FF7XMfdBaoV1zK7D2UMlUhU%3D\"}]}\r\ncontent-length: 11910\r\ncf-ray: a07b4a5cecaeb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11910,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 238x220, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0b9da410678ac7ab93a1df3c5237c0b1","sha1":"e82c4b007509aa6504fc2f7b5241961c88d366f2","sha256":"0ae7cf9416b4cc1411b502ceb7f75d62dc09d39e585dce8e31df710dce4216b1","sha512":"fc4e5807bfd839c5abf741d186ac8f960ef3bf93e91fdeb98aea9350d1c311bf6cd14969385d4f15bbe9354b06043c2fccce096f52af24f0cf3c8bea87297c82","ssdeep":"192:n2j24IPEHooqPcJdx4Ie53t3LOCY8wULHBvPIFiqu16gmUChd46Aia4fHL8vEm:nr4Xq0Xe5d3LO8PxvquszNduiZHpm","tlshash":"4b32cfc343c6310feaeed0a59c1490568b2be8f85d50e9dd45847e726c193bc8bfc694","first_seen":"2026-06-06T01:45:51.939617Z","last_seen":"2026-06-06T23:51:55.88974Z","times_seen":3,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"api.20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"api.20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/assets/2jDDsHQAdICPhCWm7m.png","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /assets/2jDDsHQAdICPhCWm7m.png HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:24 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\netag: \"6a2034c5-10d5\"\r\nexpires: Mon, 06 Jul 2026 01:45:19 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 79204\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LuGF9W2K2YmgDPNkI1WCTnf7uEf98JZKvhyyNFC%2BD%2BPYbGQ9JlUnL98EqPp2v66h5Ta4vyx66mWn%2FRkf4nkV4xBJng7EIvAxdmALpfc0bqjYE2AAgdOBFC86NQCn4A%3D%3D\"}]}\r\ncontent-length: 4309\r\ncf-ray: a07b4a5d3cb7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4309,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"0cdeeb5ecaa8d1bc40f460898dbfe0c7","sha1":"7890d7244adc3da8757a6e72ed8944b3c101eb59","sha256":"825dfd6cc0b389d83d47777035bb90f74ee9b5b7a31c7cb88556803e6270d237","sha512":"476ea3cb5c9d6f36ec15d11b28bd23b162d7fe1c59bc19387487e806a0c8404f1978230d8fc0946c7eaef69286b23b14436b6e007deba54c44b0ee12f8e50855","ssdeep":"96:ZkKZWtJjyatO/S/xeFEpJsmanknHCqF/gtXAdIkmHGw6/jXVwbjyHW:ZkKZWfma4/SwFEpJsmBiafm92abf","tlshash":"08918ee8b8b187389c9a3663ae17433d51665e7ebcf81a195e02700b08b6c0cc7f7895","first_seen":"2025-03-16T21:48:34.786708Z","last_seen":"2026-06-06T23:51:55.844369Z","times_seen":15,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/assets/IaxmBHmJF9B8brp-BE.css","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /assets/IaxmBHmJF9B8brp-BE.css HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-c9b\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SYHqA55TLOvV25N01np%2FFrA2c6hUxC90DyJxSSiDOgSEYIuWQRBMIpfhCHQi7UitYvXwP8gLfikt7x3X15RnwEETmsL9Bh9Mno%2FtRKYP7gZVg6MkKpic%2BKybRC1RWQ%3D%3D\"}]}\r\ncf-ray: a07b4a585bf9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3227,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3226)","md5":"70e54f12d62d1315ffd14b024d382b54","sha1":"b0b0394eb58490a978161a192e0775d6a6760a76","sha256":"17c074f0564fc5eafe44d8111ba1ac4c85b99103d728c19c2fe486a11dfc92c6","sha512":"11312280a667403bb1ae15e2ca81b5cebe042ad198c4ec5504e960a42aa6e69f64e9e4d3d94d72c7129a784cf1a8d1c56b504a91ed8a4a3569018f5daf8d5171","ssdeep":"","tlshash":"0f61aa36a370a17b9f02f67dbb5a6adcf128e7714d01b3a5b281201888c7bfc1532917","first_seen":"2025-04-17T13:49:08.756011Z","last_seen":"2026-06-06T23:51:55.887332Z","times_seen":95,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/q9KnyViAuhB8RPQvEu.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/q9KnyViAuhB8RPQvEu.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-4d5\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KlDashQ3azVg7PWKnsPDjAfB4WR3KiUwWgJDF9CYmzwf2r1ectjZMzfBPNRsMnoPJCFxwkeyK9fcw4CckDc%2F8nY7sq9j0%2BWCoOkvcvXf15nPVHYfLFSsC0kpuhvX0g%3D%3D\"}]}\r\ncf-ray: a07b4a58bc1bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1237,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (796)","md5":"c613846fce4ebb29907f2a96b5d0da04","sha1":"294d4be0c343b69821df43b0fa5351e0ddf2a84e","sha256":"7ad8ed3ede28ff879e59a8068c5de77450a8eff903e01419203f2f5f5c3e5d76","sha512":"1dda5c2ec2367861cd081e3f33dfb016a5bfbac4f0de4f23149d5c5dfdba6386935d20e3416f3b5000705746f7de95714887a9b2481bf6766bbbb87a421890fe","ssdeep":"","tlshash":"6d21211d6402db79d897495ce09c1802518c3feb9379c991f0eead2aa6d1eb0463e334","first_seen":"2026-06-06T01:45:51.886743Z","last_seen":"2026-06-06T23:51:55.855917Z","times_seen":3,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/assets/m30TIdyFOwBe9b3THL.css","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:21.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /assets/m30TIdyFOwBe9b3THL.css HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-18f7\"\r\nexpires: Sun, 07 Jun 2026 11:45:21 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xgpR%2BAvnhRgCgjrRIjzhoSVDHwyRhz74fsA7giTtWHC21AM03OulyilqMnfhY5sLsoHwUbmW3XjxBhGFShSYWrFI%2B9EaJf8ve1DsAJEwR%2F%2Bd%2F%2FllildFMda%2Bej25UA%3D%3D\"}]}\r\ncf-ray: a07b4a4a8a86b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6391,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6390)","md5":"b9bc69dfebbe70d73fb49c7d1c117e62","sha1":"ac989820671a1c955dc822ca46a51100542f421d","sha256":"4b9984ff63ee09b3985851625a57806a2cbef2cd08aaab0b0afbb6a2c1777076","sha512":"2ef879789fa48068bb0541d4011add0144646b00f38ab43dc10f4116356232dbbcab71588516e1d03876a1c4cc62ff5e441ac16c29aa416103c436e17f4392c5","ssdeep":"96:3B5mSJ+MbpDAKneQYX+4JToiL5dKSme+jeHPdw297fzrEIuf/:fmUJbiKnehJTtdKSme+jeH1Zpbw/","tlshash":"d0d1b730a3142c63a2224f194b44e6f86ea450638ff38919f6856e2cd7fd8f4125eb82","first_seen":"2024-03-11T20:01:52Z","last_seen":"2026-06-06T23:51:55.857589Z","times_seen":470,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/6igAjaRNr4DD2YpfyN.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/6igAjaRNr4DD2YpfyN.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-5c\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mGHiSiZfbzUNWD0xSg47a9Tw7ZFm53wuhbWlQoq8YjR%2B0LzpId2A3%2FR2KayJyQ%2FaDuLKoLkiFSfRhRRchli%2Ba7xg%2FD6%2BNZ0n22MD328%2BscfktiPUgH4ncBj6%2BW940g%3D%3D\"}]}\r\nage: 0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a07b4a5c5c96b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"dff4fc2dd2d973f4a476c2b275af6b88","sha1":"faf31cbd9dc8796fe8b19292674f621e38b1a5a5","sha256":"2b90f1659d60d2ae558af0a811ea86e5ce24c3ba87223e6a678dc597a4450da0","sha512":"d1e451d295990fe4f8548ff1dcc62d6d5bf080ee438da75d2d829bdba6debb5e5d9f668db14526a477d58e811249909deb734c039cfc239aafdb6efc3f057e4a","ssdeep":"","tlshash":"07b01203468802e41475409b0b15f7f41566010c1b2442e9700d0b16c7262898d0fa10","first_seen":"2026-06-06T01:45:51.907335Z","last_seen":"2026-06-06T23:51:55.891281Z","times_seen":3,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/EmSxZazYwNBEWLZIlX.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/EmSxZazYwNBEWLZIlX.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/js/UTnxdiDPU8uprSVbh-.js\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-1007\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MCOxdIHwFYctjPoZTvG3hGljwHGGacun0rTTW3YQLXcbJvdrsmpXDLfMNsR2lV%2BTFxlmJYXauWZ6JP9LzHLWLPR2h4SLnkljd8KNcvU7wmBgjLGCziei6UWPwKoOFg%3D%3D\"}]}\r\ncf-ray: a07b4a5c5c9ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4103,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4102)","md5":"4a90d53048319ad35a3cae4d2158b8f6","sha1":"19c2676d0b4c5e26c63f90bdb389d6a1e69dee7f","sha256":"43b8ff164551996ea5ee84dab4b42574159a19df7615666c55c656b99726e990","sha512":"0369077f5b22dc41bb71e3a8433fedec8b566fe4306606150f54e545a3053b4c7c7f34f2473ba761e3784a03a2b3014e8115071dc0b50bc49356559390b47619","ssdeep":"96:AazdRuMfPzqfcSFuxEY16+NZgLUq6zfemq6Y7+t6k1YU6pJ:vzdR7Pz4cSICYyUh5Ghr","tlshash":"7a810088781789fc84ed0624ec1764d0a5cf2bedd03409a1b0fedd1626d69a0cf96bf8","first_seen":"2026-06-06T01:45:51.908896Z","last_seen":"2026-06-06T23:51:55.856744Z","times_seen":3,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/assets/u7i7chDWuxf2sgTIoS.png","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /assets/u7i7chDWuxf2sgTIoS.png HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:24 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\netag: \"6a2034c5-1164\"\r\nexpires: Mon, 06 Jul 2026 01:45:19 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 79204\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zb5D2ZAO2S7LfyTQT3gjhvZMT6wIcWIIsaxkP3jFxAPw0zsel67F%2BW%2BcPqPTj5uj%2Bel34qaZNNT%2BsTz9o6yzy6a%2FGEXfMJoheUEriejI5ID1Aqzp430vgViW7aD%2FMA%3D%3D\"}]}\r\ncontent-length: 4452\r\ncf-ray: a07b4a5d1cb4b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit colormap, non-interlaced","md5":"99466aed08eb1c13ac31e3da38384689","sha1":"01526e3f26e33af7f27c0fc9e0c3a08e44a75fd0","sha256":"5cf1bb1735efa4da42f70836fd8b1dffb3ef3dd560be3548d6cecac9d999678b","sha512":"85031aecb27f466a81027561cd374a6a5e2a7e298903e0d1ef0be5a002aa9c57f1070f709db46c2b6e63d50a4cb696f8c66718a033ff92f1ed35b45c8f597e7e","ssdeep":"96:37WWp1+m/zU6oSmk1o5P91b8g/NNGD/MlTwfIbMOzuF+5Z:rjpBaSmaQnbVNYD4wfIbMOCI5Z","tlshash":"a2916d287f04085ddebb3677c48a4038bedaad42ce716221d523f21c46360b30abfd04","first_seen":"2025-03-16T21:48:34.867883Z","last_seen":"2026-06-06T23:51:55.89714Z","times_seen":15,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/assets/6bVdqbsSAlBG8YrEpv.png","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:24.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /assets/6bVdqbsSAlBG8YrEpv.png HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/assets/PbTJ7UGDGhDY97Ofvr.css\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:24 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\netag: \"6a2034c5-1388\"\r\nexpires: Mon, 06 Jul 2026 01:45:19 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 79204\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p4RugzmMefDySMOxKIZcLds9qimTPYR5C7k75VgeQeUkE4bGa0i7n6FRWL9sIsxHbru7dHSaLO4x995ph3ND3%2BXDshPb8dciqBiDMJawC7xVDOqPAuruLJ75%2B4CwoA%3D%3D\"}]}\r\ncontent-length: 5000\r\ncf-ray: a07b4a5d6cbeb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5000,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 341 x 151, 8-bit colormap, non-interlaced","md5":"acb9c32713d5ad3a64c59c3dbcce431d","sha1":"d207d83f6411308facf290566405e8a3fb282752","sha256":"afec28c5826e27d232c26f6202cc11787fef6b10ad848979af6f1cfc4a073031","sha512":"5b09ce412accd1c8f1b582b4db1181eefdbd53fc4129c8949c0fc657447ff06ca11d0e07430232e196327d1593ca444f700e2ff0d4dea84ccef46b7b5418f76a","ssdeep":"96:fjP8zsFSy6OwUX49BnKNFGMJVRhZE6rfZzmaQLwEjJYAYEaIYKQcccdL+:fjP8zsFSnUXKK3dbRhZEQZPENDY","tlshash":"44a1afb782d70ca6fdbd0e94436773eb9c0a5f7360cac1509abe820059b9235536ba11","first_seen":"2025-03-16T21:48:34.806219Z","last_seen":"2026-06-06T23:51:55.904401Z","times_seen":13,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/j4eCAO0VYlCYrq9yV8.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/j4eCAO0VYlCYrq9yV8.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-1f7\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JqMAEhaZSkSAUFbTamd5yW8j2tBci7yNoJB2kb7PIuiWb7SD2%2BmQqIlZbeeVNQmOnjBSxXlPAn0WuRbIFEvw%2Fwd7vXRz0FFQ4copdGJB9%2F4Up2li9qHdYxxlOcDdUA%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\ncf-ray: a07b4a58ac13b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":503,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (502)","md5":"4a842bc5b5100338454f23472672b3e5","sha1":"9cf061a337cc893391f2bcb814ab1e7a82b28b82","sha256":"d37b1e186117d181014648514a217a26edc938148decc407b0ed2b8c9ea6ab29","sha512":"d4625e79e2366b664cfc4124d082a2c84457a41cb4f7d5cfffc18d401f52e51cdb126e30b3ff73bb62e5f3de4d731689d26e8941e43961af71a6a7dc50e3d8be","ssdeep":"","tlshash":"c4f00e6694ccdc30472ffa8c801872d1021ccab8c33042c8ec5e629ee3e9478c65df20","first_seen":"2026-06-06T01:45:51.867202Z","last_seen":"2026-06-06T23:51:55.893354Z","times_seen":3,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/MGzSXaUi56eVIHNsue.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/MGzSXaUi56eVIHNsue.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-316\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GY1FgT3R%2B26pP4XFZkc4%2BRT02MhmymBK5KcrK8WYYrtIJFAXMoGUkO7sT6jMewA%2Brat4WW%2FI333f%2F5ATbztQAupW18Jzv2IHI2Efd7gtjVCMizk%2Fz%2FstEyV4fb9%2FRQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: a07b4a58bc1eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":790,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (463)","md5":"330e518899a09c0fcb250ec0e0bcc48b","sha1":"b4fb0de70b2c1e4d23a840fcffd15f1895784ea5","sha256":"a032d965219a3243e088a45f5669a1c1abaeea2b71aafe8aad26dbb1db6c7c3a","sha512":"cba31c32da3b02244f5c1b0345997a43fb884580777f18e716d488c5bc2bd35a3397e2b98b17186937031855dee2880301a16f2f5c9eab9cb7116573f1eeaae1","ssdeep":"","tlshash":"2001258c58eacbf9c49702582d8a10a5d0506b4c9b35d965f05cad22638fcf095de738","first_seen":"2026-06-06T01:45:51.891621Z","last_seen":"2026-06-06T23:51:55.900196Z","times_seen":3,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/assets/RKID6ATRAOD-ECb4SB.css","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /assets/RKID6ATRAOD-ECb4SB.css HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: text/css\r\netag: W/\"6a2034c5-fa\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y51keLkmz4ZChDjtUO0iCLiTBMTL1Yjp7qQPAU9McK49lXXN7gELnr6r1luKT%2F0sRZHuo6JmNEQ4QxcrdPLDo%2BsxFBOYRtN0rUn2457hdMMrhxQdmZnWR5er0zL8CA%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\ncf-ray: a07b4a587bfdb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":250,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6ad82a5f48465d9e5de0e84bd5f50d7c","sha1":"9c24e97b567146159614d9e16dfb68a1a3381595","sha256":"22525203f59285ea97b21dd7612463b3697f5ad782a756acf991fca8073a8a45","sha512":"ced62d3cac70b38203882f9ac47b97c0f4a8d900ac4374847fe0bf9e5b580cd5ec0ca4e796f627d25e1e51806258eb21a4b7429ab9e1b8c6e026314a0203945e","ssdeep":"","tlshash":"56d02b5a8c5851dcc77ef214963401dc01243213d5730c3ac57c7b167cc6b601526bd4","first_seen":"2025-04-17T13:49:08.656528Z","last_seen":"2026-06-06T23:51:55.910108Z","times_seen":95,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/guB0uAjfk1tLqqJsUO.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/guB0uAjfk1tLqqJsUO.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-324\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VWmc96bhGo80YAMni7Y%2FsrhEtUtE7LsAQObkAunaoc4uCQRDfh%2B0Qnzs5ad0zcuFZmRVAL9HRhn8lGhZ5hK93tfcNX2n68Q4KNsZKz%2BVGcPdxDPYM%2Bc6OEeNL11faw%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\ncf-ray: a07b4a589c0fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":804,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (803)","md5":"a7693b5d4afe2e608bc9c344d31a8e6f","sha1":"166326c8c39400d7abbf07df9f86f3343ce7f7fc","sha256":"82ed0de5fa389f4aaa57ffb61371606340cfd8643cc04e599f7d3436d0b51db7","sha512":"7359bdb90c7240904921e261e655ff5cb0b52e15f223614b26198717e59e6d45f36c3ca829eef066b2f5e0bb61f5ba7c73ab0ab46965545bfda0f67eee45703b","ssdeep":"","tlshash":"b2012502b47470d0b3bb0c81450509c166724b3a2742c0e0b51c4e83e67fea2c2f7f69","first_seen":"2026-06-06T01:45:51.895769Z","last_seen":"2026-06-06T23:51:55.875355Z","times_seen":3,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/favicon.ico","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:22.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:22 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2UALIYmFonF1IvuCjTxvjWHIV2AjKLHqSOg5Ci6%2FEJkHNmvhep2c9V%2BeYQ%2FUppM8T7WtIsNDQg5hz8RVFmgH9bl4lMQphdt68tH%2FpayEPf4ETMNl6YgpkNS9nE6igg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\ncf-ray: a07b4a544b77b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-06-07T02:22:47.108733Z","times_seen":279391,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/assets/REQExJvtd6BBGxtG58.css","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /assets/REQExJvtd6BBGxtG58.css HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://20268-tg.cc/\r\nCookie: _scid=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40; _scid_r=NEDtfiThLO1_dEYNVtEXpSdVqfTAch40\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: text/css\r\netag: W/\"6a2034c5-77\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6KGlE%2FMWnkpRWOD%2FQffuudUBWMiai0vb%2FYYgmbQ4ooPlOPBR7sHm%2BpIErbwsGVPd95yWvQB7Sx9d5rjMcpZIeyPUnnKpC4%2FCpwfjnvHPAA%2FKvgwWrYOBMe%2F3J1%2BPnA%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\ncf-ray: a07b4a583bf4b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a9fadc4adb941b49dba4057ed5892a8a","sha1":"97ef5525981dbd1ea4d8b3717a4ed1ec47f487ad","sha256":"3b1bb70e6f7bfe6da705495af851998d936ecccd16a2f898321f83febb45a2e6","sha512":"ef44b98d8614ff9ceb690a44fd6e7db3f869f33fe6ca2658de616b6d074922c8ae0aaa9fb8ddeeaa267ec5b5ddedd13801271df5cd6f0e579f87a38a44cdbd1e","ssdeep":"","tlshash":"c0b09b1516013b1c705d7441de5416d75141d437946175558a81572f448e4b72d747a4","first_seen":"2025-04-17T13:49:08.687019Z","last_seen":"2026-06-06T23:51:55.916921Z","times_seen":120,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/dlovnVzDC84M3VPCD8.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/dlovnVzDC84M3VPCD8.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a2034c5-3bd01\"\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B8G3UnOvKQ%2Bzki8VFh22wPYi%2FP9dK8Mwn1fR7IJea6IBEEubmALTHwWGN%2BUU9E3eB%2BewBrQyUPWIJkHwXdK7x%2Fqr1YY7NP3BwRUciKfhA5rDJ44iaxivZenNd4p2KQ%3D%3D\"}]}\r\ncf-ray: a07b4a588c00b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244993,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b9ea69441deb48febdc18279c54436e7","sha1":"bd26fc9dc60326324fd84b880b6705db016e2e8e","sha256":"7da70c5ef3a5ecb496522b3be7b516dc1b6e127756f264c9b5ee43f81a9a5c6c","sha512":"3a5ecc95bf47e6e22399e227995f10cc90510379cee956b240e92f6588d9d20a7c873e7c56656e7984c590f0405f3442d841349b325c270c98665b1f92c066d6","ssdeep":"3072:WD7VOnZY5kWoH6J+2JfnI2o8Xck/7CrmxUxpMIt2kN3nT8Q5f4a:I7VOnm5AH6J+2Jfn4531l","tlshash":"b8344b51640beb3ee4a3588d68491800380d4feed51d9d66f2fcb627abc6cb0573e768","first_seen":"2026-06-06T01:45:51.938433Z","last_seen":"2026-06-06T23:51:55.855015Z","times_seen":3,"resource_available":true,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/yWdBPusINArYcHO7px.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/yWdBPusINArYcHO7px.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-a5\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0RQLe3avX9h3Plsj8YwFipewcGm8ID36X3Vb98L2cIThGNrnAE7IVeKHMEw0uA9wtw6w0OwnxXZi%2FT9bCo2puzmKyTgDZg2ARJXSs02IKNk0oMIoalngUZG9MMVtdA%3D%3D\"}]}\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\ncf-ray: a07b4a589c09b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"2b593e94ed32cc7aeb47c7593e66a872","sha1":"b1df1a84d07b84d3027a0c1e99d99f2a12c2ba2c","sha256":"5ebd8352ace662cdfc522ade70889dcbb0b1ecc34965a9ccd744dee78d58e719","sha512":"4d5bce45e64125b9b88d2738cbc79441683280ec73f79a2c040fa9fc2fd2d9d02c7c72504a4744b7a74155d0de1335f3a3f813e583088e6d45c4b2cc8d7c70c0","ssdeep":"","tlshash":"34c08c47b44682e0921a0c88011a8d821e250e9823469fc080496ea80a710a8ca8ba2d","first_seen":"2026-06-06T01:45:51.924309Z","last_seen":"2026-06-06T23:51:55.901102Z","times_seen":3,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"20268-tg.cc/js/i1hPDjnSZZBgwtDQQg.js","fqdn":"20268-tg.cc","domain":"20268-tg.cc","tld":"cc"},"ip":{"addr":"104.21.60.239","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://20268-tg.cc/","date":"2026-06-06T23:45:23.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"20268-tg.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 13:11:34 GMT","end":"Tue, 01 Sep 2026 14:10:04 GMT"},"fingerprint":{"sha1":"D3:93:C3:71:2C:D0:9B:10:33:6F:81:95:61:BF:43:4B:96:92:58:1F","sha256":"7C:DD:11:64:7D:5D:E2:6B:96:FD:D2:C8:DC:86:DF:FB:A4:56:AA:96:6D:D4:12:F5:7C:24:65:45:C8:02:94:45"}}},"request":{"raw":"GET /js/i1hPDjnSZZBgwtDQQg.js HTTP/1.1\r\nHost: 20268-tg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://20268-tg.cc/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 06 Jun 2026 23:45:23 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a2034c5-f6\"\r\nlast-modified: Wed, 03 Jun 2026 14:05:57 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Jun 2026 11:45:23 GMT\r\ncache-control: max-age=43200\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lJIlFU7fdaxPT%2BNLx%2Fs5flCp6Djf32E9UjjjPm48BmHWFs2EYs2fZno%2Bc7JLUJ0x6dz6x8OInaiA%2BEh5KAzx7sqsQ5ZZzdjBTYwCfTk%2FLLKI7f0lwsDdzRLq4z1cdQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\ncf-ray: a07b4a58ac15b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":246,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"2ea53b6f4b4df73dfe1f831edb7386b8","sha1":"74cd317b45a96b1fabaa2386d24383104b55e058","sha256":"964effef9654dc72f572661227d6b1a960a3d53adefd3e938c3babba394af2ff","sha512":"138696d04e4f205a5f11ea8bc212c4f2d41d68f51c3da973cd5ec54b5804d3b9ef26a3d0d485c0550bee3384ed9eb78165f5bffbcc1e4678dcb65ec3f4643723","ssdeep":"","tlshash":"31d02b04898843a82db1106a0b06a7b021b6015c4f74c2f4961e4e30cf1930a1e4ba11","first_seen":"2026-06-06T01:45:51.930827Z","last_seen":"2026-06-06T23:51:55.873697Z","times_seen":3,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-06","alert":"Phishing Block","trigger":"20268-tg.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-06","alert":"Sinkholed","trigger":"20268-tg.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}