{"report_id":"ed0fdd8c-0830-4d2d-80f5-2df81a2ecff0","version":0,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-08-25T20:57:13Z","url":{"schema":"http","addr":"tlcscanner.com/","fqdn":"tlcscanner.com","domain":"tlcscanner.com","tld":"com"},"ip":{"addr":"157.230.180.90","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"tlcscanner.com/","fqdn":"tlcscanner.com","domain":"tlcscanner.com","tld":"com"},"title":"Microsoft SysScan — Browser \u0026 System Diagnostic Scanner","dom":{"size":25341,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (386)","md5":"f47960f8c4bde6b138ee21d9e3869208","sha1":"45c1bef3728954f39cbf6ea264a67abf2c86371e","sha256":"37a11c1763c9dc154712f7db68916a7a82db420aa139e32f040477589cc33e4b","sha512":"d7677915708ff084f824c88812eb7ae9f7444e32e9f95a14bc872a9aa1b4dfe30db411f7f6f0db381582f8ed56a2f6539c9fe1e6624dbed2a6ec72ec4c06e90d","ssdeep":"384:Br0ohtg/f+kUCklnz3LzWPbaQdxTinX2KzUk:Se6+kLy7Lz0aQxTinZr","tlshash":"39b2f12061f9983780a745c9a6a26b7e6ef59703c90a1104f7ac4bf54fe3ccade37518","dom_hash":"domhash08d302c271cb6370cdaa731013fd5d30","first_seen":"2026-08-25T20:45:41.232869Z","last_seen":"2026-08-25T20:57:14.910227Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tlcscanner.com/","fqdn":"tlcscanner.com","domain":"tlcscanner.com","tld":"com"},"ip":{"addr":"157.230.180.90","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T20:57:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-25","alert":"Detects file containing Telegram Bot API","trigger":"tlcscanner.com/sysscan-scanner.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"tlcscanner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"tlcscanner.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-25","alert":"Phishing Block","trigger":"tlcscanner.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"tlcscanner.com","ip":{"addr":"157.230.180.90","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"domain_registered":"2026-08-10","domain_rank":0,"first_seen":"2026-08-25T20:48:50.10114Z","last_seen":"2026-08-25T20:48:50.10114Z","alert_count":17,"request_count":5,"received_data":139146,"sent_data":2382,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ipapi.co","ip":{"addr":"104.26.8.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-08-20T02:37:52.187777Z","alert_count":0,"request_count":1,"received_data":2522,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.fontshare.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2003-10-01","domain_rank":604295,"first_seen":"2021-03-02T20:36:57Z","last_seen":"2026-08-23T06:51:27.846639Z","alert_count":0,"request_count":1,"received_data":3084,"sent_data":554,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"tlcscanner.com/sysscan-scanner.js","fqdn":"tlcscanner.com","domain":"tlcscanner.com","tld":"com"},"ip":{"addr":"157.230.180.90","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"md5":"8c5c4260cf006b1f230e7fbb5ea1671c","sha1":"99e2e5f1fed66bd9f26d6fd250945633b1e8896b","sha256":"d3d0acdc01a33893ddee8d2fcb25c8dd170e80b99ea764413eb8dea1a463e791","sha512":"330089914a1acceb940acec6c80659f08effcbf15f2e1921faa7f10be392160118aee24bb4449fc2aa50c8306c1225b448be950b8b5154aaa014e32e879de5a2","size":82759,"token":"8824557834:AAHwjOEFp0mdl0jg549hnPPnnJZYVgW_-XI","is_revoked":false,"bot":{"token":"8824557834:AAHwjOEFp0mdl0jg549hnPPnnJZYVgW_-XI","user_id":"8824557834","username":"tlc34_bot","first_name":"tlc_bot","last_name":"","chat":{"chat_id":"-1003971442521","title":"TLC leads","type":"supergroup","bot_is":"administrator","total_users":6,"active_members":null,"admins":[{"user_id":8356788977,"username":"daniel_webb23","first_name":"Daniel","last_name":"Webb","is_bot":false},{"user_id":8824557834,"username":"tlc34_bot","first_name":"tlc_bot","last_name":"","is_bot":true},{"user_id":7137925447,"username":"cmystic1","first_name":"C","last_name":"mystic","is_bot":false}]},"pending_messages":6}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"tlcscanner.com/sysscan-scanner.js","fqdn":"tlcscanner.com","domain":"tlcscanner.com","tld":"com"},"ip":{"addr":"157.230.180.90","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c5c4260cf006b1f230e7fbb5ea1671c","sha1":"99e2e5f1fed66bd9f26d6fd250945633b1e8896b","sha256":"d3d0acdc01a33893ddee8d2fcb25c8dd170e80b99ea764413eb8dea1a463e791","sha512":"330089914a1acceb940acec6c80659f08effcbf15f2e1921faa7f10be392160118aee24bb4449fc2aa50c8306c1225b448be950b8b5154aaa014e32e879de5a2","ssdeep":"768:/c9eRdUU7sVJJjugaxkWmIASn1U9pqQTNv+zbJz3p/4P5iV:/cgRd1GJaFhR+9YUNWT45iV","tlshash":"a283946a9576293505a360a95f9b61016321910b2e08fc4c3fce831c2f9d66f92f7fed","size":82759,"data":"","first_seen":"2026-08-25T20:45:41.24032Z","last_seen":"2026-08-25T20:57:14.914855Z","times_seen":4,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-25","alert":"Detects file containing Telegram Bot API","trigger":"tlcscanner.com/sysscan-scanner.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tlcscanner.com/sysscan-scanner.js","fqdn":"tlcscanner.com","domain":"tlcscanner.com","tld":"com"},"ip":{"addr":"157.230.180.90","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tlcscanner.com/","date":"2026-08-25T20:56:46.792Z","timestamp":1787691406792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"detectsysscanner.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 09:23:28 GMT","end":"Thu, 12 Nov 2026 09:23:27 GMT"},"fingerprint":{"sha1":"39:70:9B:7F:AA:13:A1:89:CB:65:32:6F:AC:3C:14:92:A3:C6:EB:C2","sha256":"8E:6D:15:73:F7:5D:76:AF:F0:38:2D:38:7B:F9:70:1A:3B:2E:F7:AC:FA:EC:38:89:51:98:FE:7F:90:31:5C:45"}}},"request":{"raw":"GET /sysscan-scanner.js HTTP/1.1\r\nHost: tlcscanner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tlcscanner.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:56:46 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 10 Aug 2026 15:47:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a79f29a-14349\"\r\nexpires: Wed, 26 Aug 2026 08:56:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82761,"size_decoded":22910,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (315)","md5":"8c5c4260cf006b1f230e7fbb5ea1671c","sha1":"99e2e5f1fed66bd9f26d6fd250945633b1e8896b","sha256":"d3d0acdc01a33893ddee8d2fcb25c8dd170e80b99ea764413eb8dea1a463e791","sha512":"330089914a1acceb940acec6c80659f08effcbf15f2e1921faa7f10be392160118aee24bb4449fc2aa50c8306c1225b448be950b8b5154aaa014e32e879de5a2","ssdeep":"768:/c9eRdUU7sVJJjugaxkWmIASn1U9pqQTNv+zbJz3p/4P5iV:/cgRd1GJaFhR+9YUNWT45iV","tlshash":"a283946a9576293505a360a95f9b61016321910b2e08fc4c3fce831c2f9d66f92f7fed","first_seen":"2026-08-25T20:45:41.24032Z","last_seen":"2026-08-25T20:57:14.914855Z","times_seen":4,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-08-25","alert":"Detects file containing Telegram Bot API","trigger":"tlcscanner.com/sysscan-scanner.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"tlcscanner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"tlcscanner.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-25","alert":"Phishing Block","trigger":"tlcscanner.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"tlcscanner.com/favicon.svg","fqdn":"tlcscanner.com","domain":"tlcscanner.com","tld":"com"},"ip":{"addr":"157.230.180.90","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tlcscanner.com/","date":"2026-08-25T20:56:47.015Z","timestamp":1787691407015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"detectsysscanner.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 09:23:28 GMT","end":"Thu, 12 Nov 2026 09:23:27 GMT"},"fingerprint":{"sha1":"39:70:9B:7F:AA:13:A1:89:CB:65:32:6F:AC:3C:14:92:A3:C6:EB:C2","sha256":"8E:6D:15:73:F7:5D:76:AF:F0:38:2D:38:7B:F9:70:1A:3B:2E:F7:AC:FA:EC:38:89:51:98:FE:7F:90:31:5C:45"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: tlcscanner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tlcscanner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:56:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 755\r\nlast-modified: Mon, 10 Aug 2026 15:47:36 GMT\r\netag: \"6a79f298-2f3\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":755,"size_decoded":1027,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"484d76251c2e1278bfe341c96c4d2414","sha1":"badfd8212fc08f78acb3e892454427b554f57dbe","sha256":"f848aaa8c7599928b7910eaecec780051c1777940c7c3e530afa0bf148359bf7","sha512":"2e8ad60f015f8a843581ecabb4ec08c95e30e1d6fcc757d0abe45630450415ced0bb0d8de00903ff8f44cb3a3ead26c79ef5584eaaaadaf51f9b3aa6cd2e308e","ssdeep":"","tlshash":"0a016812e59c811bc304870dd60cb969338fa2d39ba68100b1986b2a1a385e75dde3bc","first_seen":"2026-08-25T20:43:57.447582Z","last_seen":"2026-08-25T21:38:40.290069Z","times_seen":17,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"tlcscanner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"tlcscanner.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-25","alert":"Phishing Block","trigger":"tlcscanner.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.8.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tlcscanner.com/","date":"2026-08-25T20:56:47.018Z","timestamp":1787691407018,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 09:56:10 GMT","end":"Wed, 11 Nov 2026 10:56:07 GMT"},"fingerprint":{"sha1":"F3:18:40:3B:2F:29:8F:72:5D:C9:F9:8D:83:FF:1A:13:26:F5:A1:7A","sha256":"17:EB:45:1D:BC:F6:67:CB:CB:85:0A:03:6F:55:93:30:F8:33:F4:78:1A:C0:46:17:64:09:C8:78:62:38:02:5D"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tlcscanner.com/\r\nOrigin: https://tlcscanner.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 20:56:50 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: POST, GET, HEAD, OPTIONS, OPTIONS\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://tlcscanner.com\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://challenges.cloudflare.com/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kcFxEFL23EvpFOJ3NkDNmHOdYGSUK0bMAjVLKDnOuHkDSHDlC92oXNkCsC3GhqWikJQIWWjclBaBuJtdqw1qptrSU8ZMrJ42v7R8TfvPZ7Z414hXF1nzMQmc\"}]}\r\ncontent-encoding: br\r\ncf-ray: a30d81718f3256b5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":742,"size_decoded":2133,"mime_type":"application/json","magic":"JSON text data","md5":"c9a83cf7b79bb169afa15370aaa9d642","sha1":"e0fb50e54473bf4468fe35add9fd6f777c8633dc","sha256":"9513f5d1cb329721ac415720ce53669e0e98329f191ef9bacb323dd35b4134c1","sha512":"b937a919074c16e74b79086e2d1037911cd8578d04669f9bb90914c0cf579bf200fee329b8282a3c700eddfe26dbe73407141bd88a949e219f394fdc0d672e41","ssdeep":"","tlshash":"5a01df68e4780f7b9cb813587078691b113422176e563a8e7bd4a74d0f8d8bf30b135e","first_seen":"2026-08-17T05:59:44.876786Z","last_seen":"2026-08-26T00:21:54.362989Z","times_seen":316,"resource_available":false,"data":null}},"time_used":3390,"timings":{"blocked":0,"dns":6,"connect":2,"send":0,"wait":240,"receive":0,"ssl":3142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tlcscanner.com/favicon.svg","fqdn":"tlcscanner.com","domain":"tlcscanner.com","tld":"com"},"ip":{"addr":"157.230.180.90","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tlcscanner.com/","date":"2026-08-25T20:56:47.230Z","timestamp":1787691407230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"detectsysscanner.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 09:23:28 GMT","end":"Thu, 12 Nov 2026 09:23:27 GMT"},"fingerprint":{"sha1":"39:70:9B:7F:AA:13:A1:89:CB:65:32:6F:AC:3C:14:92:A3:C6:EB:C2","sha256":"8E:6D:15:73:F7:5D:76:AF:F0:38:2D:38:7B:F9:70:1A:3B:2E:F7:AC:FA:EC:38:89:51:98:FE:7F:90:31:5C:45"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: tlcscanner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tlcscanner.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:56:47 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 755\r\nlast-modified: Mon, 10 Aug 2026 15:47:36 GMT\r\netag: \"6a79f298-2f3\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":755,"size_decoded":1027,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"484d76251c2e1278bfe341c96c4d2414","sha1":"badfd8212fc08f78acb3e892454427b554f57dbe","sha256":"f848aaa8c7599928b7910eaecec780051c1777940c7c3e530afa0bf148359bf7","sha512":"2e8ad60f015f8a843581ecabb4ec08c95e30e1d6fcc757d0abe45630450415ced0bb0d8de00903ff8f44cb3a3ead26c79ef5584eaaaadaf51f9b3aa6cd2e308e","ssdeep":"","tlshash":"0a016812e59c811bc304870dd60cb969338fa2d39ba68100b1986b2a1a385e75dde3bc","first_seen":"2026-08-25T20:43:57.447582Z","last_seen":"2026-08-25T21:38:40.290069Z","times_seen":17,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"tlcscanner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"tlcscanner.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-25","alert":"Phishing Block","trigger":"tlcscanner.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tlcscanner.com/","fqdn":"tlcscanner.com","domain":"tlcscanner.com","tld":"com"},"ip":{"addr":"157.230.180.90","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T20:56:45.852Z","timestamp":1787691405852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"detectsysscanner.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 09:23:28 GMT","end":"Thu, 12 Nov 2026 09:23:27 GMT"},"fingerprint":{"sha1":"39:70:9B:7F:AA:13:A1:89:CB:65:32:6F:AC:3C:14:92:A3:C6:EB:C2","sha256":"8E:6D:15:73:F7:5D:76:AF:F0:38:2D:38:7B:F9:70:1A:3B:2E:F7:AC:FA:EC:38:89:51:98:FE:7F:90:31:5C:45"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tlcscanner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:56:46 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 10 Aug 2026 15:47:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a79f299-6295\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25237,"size_decoded":6024,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (346)","md5":"ccfe699eeed5f84af9403e1bb390c9ed","sha1":"654fb25603f3d7d764f1271d3814ee9863c6d0f0","sha256":"fbb6580265eaffca3e9b08c6ec3c89ccfeec5bb013ec384304111f8463db7642","sha512":"cbd9676bae7cb1b5cf6ef173f06cf7acbbf954bde68786445c28a60337da12390492cfc6c187b35ad6ea7934253b2ff3559c5fca3b6b9955ee5dd161333f1028","ssdeep":"384:vrBootg/c8k48CkvtipEWtcLPBxTin72fzUy:tXD8kW1pEdLJxTinM5","tlshash":"f7b2f02061f9983780a745c967a29b3e6ef59343ca0a1104f7ac4be50fe3ccade37559","first_seen":"2026-08-25T20:45:41.237064Z","last_seen":"2026-08-25T20:57:14.919822Z","times_seen":4,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":56,"connect":104,"send":0,"wait":102,"receive":0,"ssl":205},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"tlcscanner.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-25","alert":"Phishing Block","trigger":"tlcscanner.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"tlcscanner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fontshare.com/v2/css?f[]=satoshi@400,500,700,900\u0026f[]=jetbrains-mono@400,500,700\u0026display=swap","fqdn":"api.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tlcscanner.com/","date":"2026-08-25T20:56:46.788Z","timestamp":1787691406788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.fontshare.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 11:02:22 GMT","end":"Tue, 10 Nov 2026 11:02:21 GMT"},"fingerprint":{"sha1":"69:47:B7:C8:96:DB:6E:32:43:04:72:6C:D2:39:29:8F:C3:31:33:36","sha256":"BA:97:33:5D:48:ED:D6:0F:A3:E5:33:7F:13:E8:CB:DC:E1:BE:18:1A:08:1E:1C:D1:BB:45:6E:E2:DD:DA:AF:15"}}},"request":{"raw":"GET /v2/css?f[]=satoshi@400,500,700,900\u0026f[]=jetbrains-mono@400,500,700\u0026display=swap HTTP/1.1\r\nHost: api.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tlcscanner.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 20:56:46 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6318758\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: content-type, authorization, cookie\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, stale-while-revalidate=604800\r\nx-request-id: GM8QEacVptY7fk0AAwVy\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/25/2026 13:40:45\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 82448cb74de279f19e59aef86267df16\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2340,"size_decoded":1290,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3d4ac42804672f363857ac55e385c61c","sha1":"9daa3a3de3702e2050354be54b4b2daf9e0468be","sha256":"1c055fbceec7a16d9572093fa0f30a7c962790eab0e939e129f099bab9af6669","sha512":"ed6c585c1f44d19119b3e3e446ac2f1de242f95d856effde417130c4b1dde8bf7c792f8431f99921e3e9388d1794209627e060dd0ed9cfedb76f97e9a0ac69c8","ssdeep":"","tlshash":"a741014239e030c948732c0877db1eec8d4d68131045e47e369ecb2caebae45439ab5c","first_seen":"2024-11-09T08:52:50.208783Z","last_seen":"2026-08-25T21:38:40.291238Z","times_seen":178,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":20,"connect":16,"send":0,"wait":2,"receive":-1,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tlcscanner.com/sysscan-styles.css","fqdn":"tlcscanner.com","domain":"tlcscanner.com","tld":"com"},"ip":{"addr":"157.230.180.90","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tlcscanner.com/","date":"2026-08-25T20:56:46.790Z","timestamp":1787691406790,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"detectsysscanner.de","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 09:23:28 GMT","end":"Thu, 12 Nov 2026 09:23:27 GMT"},"fingerprint":{"sha1":"39:70:9B:7F:AA:13:A1:89:CB:65:32:6F:AC:3C:14:92:A3:C6:EB:C2","sha256":"8E:6D:15:73:F7:5D:76:AF:F0:38:2D:38:7B:F9:70:1A:3B:2E:F7:AC:FA:EC:38:89:51:98:FE:7F:90:31:5C:45"}}},"request":{"raw":"GET /sysscan-styles.css HTTP/1.1\r\nHost: tlcscanner.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tlcscanner.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 25 Aug 2026 20:56:46 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 10 Aug 2026 15:47:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a79f29a-6dd4\"\r\nexpires: Wed, 26 Aug 2026 08:56:46 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28116,"size_decoded":6634,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"e4f3ec6a5c986b999957e171cf7146a5","sha1":"0b9bbbe545fc341e66950ec1cc87382beae7873c","sha256":"91fd7b43da266a1d3b2fc76fc4e814e598c1601018466118a9b8be7e2c54f543","sha512":"03b60c37ea34990faf0d7484ffa200fd73637a0dd477108c375de7e92ad620ef4f9a6e1556e9398fffeb185ba4b9f4923b720e2bd7380b6c2fdb2e8ef8e8b60d","ssdeep":"384:ioqHpBRtW51SiCBBNIU/zx+yY2EK3nVayKF4XrCypKc:ioqHdtW51SiCbNIULwy4wVaq9","tlshash":"18c26792233452747d27ea7476875b4e735ca102990edabc6fe4100cdec93fa6663b8c","first_seen":"2026-08-25T20:43:57.45646Z","last_seen":"2026-08-25T21:38:40.291797Z","times_seen":17,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"tlcscanner.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-25","alert":"Phishing Block","trigger":"tlcscanner.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"tlcscanner.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}