| t.me/gamee?start=ref_7045659616 |  149.154.167.99 | 200 OK | 4.3 kB |
URL User Request GET HTTP/2t.me/gamee?start=ref_7045659616 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
CertificateIssuerGoDaddy.com, Inc. Subject*.t.me FingerprintD7:CC:2A:92:7B:DC:AE:6A:D7:92:51:20:49:AD:3B:AC:F9:27:F8:16 ValidityFri, 06 Oct 2023 19:50:31 GMT - Wed, 06 Nov 2024 19:50:31 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (3560) Hashe5ab5194eb68ab648a0350fafcc94edb f0d747d90bf323d82fd2b1c502c12abfafa28f50 50be7af975825879d3cadd8abee72871767468168a20bd6119a48af37f952b1f
GET /gamee?start=ref_7045659616 HTTP/1.1
Host: t.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 26 Apr 2024 22:57:11 GMT
content-type: text/html; charset=utf-8
content-length: 4260
set-cookie: stel_ssid=2dddfd62a88f3617fd_10758857816367307119; expires=Sat, 27 Apr 2024 22:57:11 GMT; path=/; samesite=None; secure; HttpOnly
pragma: no-cache
cache-control: no-store
x-frame-options: ALLOW-FROM https://web.telegram.org
content-security-policy: frame-ancestors https://web.telegram.org
content-encoding: gzip
strict-transport-security: max-age=35768000
X-Firefox-Spdy: h2
|
|
| cdn4.cdn-telegram.org/file/C20d4QDEhg12VazWx_d8BV4ruYYieKh6dZHqpXeN7ctADr8ms5Rs1OmvapCoTbT1f534mYmu1wUU5cB0m9642UBo9GoTKiseRUekz7v-rF_S_ZyPke0Tfc3ZVqPsGDPtQu8VflcPnq6Hu3L9UJZdCkl3fhExsheZeg4Ijy4ZTEOTNFcFhwV0GQwhqDTe9-9sJ0stWIy7PVkvGbY7KQUQyF4jekG_YyU3yoIG-jjwXU36QEkqbTgA3LH63thVLsCVod3QfOTL_zzqdZESn378Fmv74HL_UNpQnjzJSPZcQx0TZWp2GuLPkGlnzkt5HrImk0s85Oimb4hna-0PWXsQ3w.jpg |  34.111.35.152 | 200 OK | 28 kB |
URL GET HTTP/2cdn4.cdn-telegram.org/file/C20d4QDEhg12VazWx_d8BV4ruYYieKh6dZHqpXeN7ctADr8ms5Rs1OmvapCoTbT1f534mYmu1wUU5cB0m9642UBo9GoTKiseRUekz7v-rF_S_ZyPke0Tfc3ZVqPsGDPtQu8VflcPnq6Hu3L9UJZdCkl3fhExsheZeg4Ijy4ZTEOTNFcFhwV0GQwhqDTe9-9sJ0stWIy7PVkvGbY7KQUQyF4jekG_YyU3yoIG-jjwXU36QEkqbTgA3LH63thVLsCVod3QfOTL_zzqdZESn378Fmv74HL_UNpQnjzJSPZcQx0TZWp2GuLPkGlnzkt5HrImk0s85Oimb4hna-0PWXsQ3w.jpg IP34.111.35.152:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://t.me/gamee?start=ref_7045659616 CertificateIssuerGoogle Trust Services LLC Subjectcdn1.cdn-telegram.org FingerprintA7:C6:C0:94:AD:5E:AF:20:CF:DE:D3:27:3E:A1:38:B0:FA:33:48:07 ValidityThu, 29 Feb 2024 13:36:45 GMT - Wed, 29 May 2024 14:29:18 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x320, components 3 Hash5fce412f41f292f54b0a9564720161bc 8d54a30b5402b195a92ac5a1df5675f6b01336cc 595739129e9e7392e77baf2a445343f5295754222113c133393ac29024f36340
GET /file/C20d4QDEhg12VazWx_d8BV4ruYYieKh6dZHqpXeN7ctADr8ms5Rs1OmvapCoTbT1f534mYmu1wUU5cB0m9642UBo9GoTKiseRUekz7v-rF_S_ZyPke0Tfc3ZVqPsGDPtQu8VflcPnq6Hu3L9UJZdCkl3fhExsheZeg4Ijy4ZTEOTNFcFhwV0GQwhqDTe9-9sJ0stWIy7PVkvGbY7KQUQyF4jekG_YyU3yoIG-jjwXU36QEkqbTgA3LH63thVLsCVod3QfOTL_zzqdZESn378Fmv74HL_UNpQnjzJSPZcQx0TZWp2GuLPkGlnzkt5HrImk0s85Oimb4hna-0PWXsQ3w.jpg HTTP/1.1
Host: cdn4.cdn-telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
content-length: 27675
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
date: Fri, 26 Apr 2024 22:18:13 GMT
cache-control: public,max-age=7200
etag: "fcef236c69fd6adba575a8bd2d52125388108de6"
content-type: image/jpeg
age: 2338
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 | 149.154.167.99 | 200 OK | 11 kB |
URL GET HTTP/2telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
Requested byhttps://t.me/gamee?start=ref_7045659616 CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30 ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 11028, version 1.0 Hash1f6d3cf6d38f25d83d95f5a800b8cac3 279f300ca2cbbdf9f5036ef2f438607fbf377daa 796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f
GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://t.me
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 26 Apr 2024 22:57:12 GMT
content-type: application/octet-stream
content-length: 11028
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: "63512b7d-2b14"
expires: Tue, 30 Apr 2024 22:57:12 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 | 149.154.167.99 | 200 OK | 11 kB |
URL GET HTTP/2telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
Requested byhttps://t.me/gamee?start=ref_7045659616 CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30 ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 11040, version 1.0 Hash5e22a46c04d947a36ea0cad07afcc9e1 6091d981c2a4ee975c7f6b56186ee698040bb804 0f53e8b0a717ca4ce313eec62b90d41db62c2f4946259a65c93bf8e84c5b0c44
GET /fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://t.me
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 26 Apr 2024 22:57:12 GMT
content-type: application/octet-stream
content-length: 11040
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: "63512b7d-2b20"
expires: Tue, 30 Apr 2024 22:57:12 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| telegram.org/img/apple-touch-icon.png | 149.154.167.99 | 200 OK | 5.6 kB |
URL GET HTTP/2telegram.org/img/apple-touch-icon.png IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
Requested byhttps://t.me/gamee?start=ref_7045659616 CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30 ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File typePNG image data, 180 x 180, 8-bit/color RGB, non-interlaced Hash295ccdb03006b8dfef45090dafbd46ac 491ab660270e47cbac6a5731c51cca71c1c1b2b1 a51d667d4262047c23e3a2a8aac3b46dc8a58c686cc013f2354011c07bf22cf3
GET /img/apple-touch-icon.png HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 26 Apr 2024 22:57:12 GMT
content-type: image/png
content-length: 5644
last-modified: Thu, 21 Apr 2022 13:47:47 GMT
etag: "62616083-160c"
expires: Tue, 30 Apr 2024 22:57:12 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| telegram.org/css/bootstrap.min.css?3 | 149.154.167.99 | 200 OK | 42 kB |
URL GET HTTP/2telegram.org/css/bootstrap.min.css?3 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
Requested byhttps://t.me/gamee?start=ref_7045659616 CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30 ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File typeASCII text, with very long lines (42164) Hashc2656e265ef58a9cc9f4b70b15da5fb9 85c5ebdb89d4574d72688c2650d4b84b9b09770a f1d083ffaa644c708f11db29707aa57c19246e6d32643b03fee3f82c17b224b3
GET /css/bootstrap.min.css?3 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 26 Apr 2024 22:57:11 GMT
content-type: text/css
last-modified: Fri, 10 Nov 2017 17:54:14 GMT
etag: W/"5a05e7c6-a61b"
expires: Tue, 30 Apr 2024 22:57:11 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| telegram.org/css/telegram.css?237 | 149.154.167.99 | 200 OK | 115 kB |
URL GET HTTP/2telegram.org/css/telegram.css?237 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
Requested byhttps://t.me/gamee?start=ref_7045659616 CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30 ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File typeASCII text, with very long lines (1267) Size115 kB (114933 bytes) Hash8507165c54755807224a197057729d87 ace8a26f8402baee786617e4820a0860822921f2 2df92c7108cf6788ce6ffe7d3170480c6b6ca0367ae57911849b3760f3753994
GET /css/telegram.css?237 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 26 Apr 2024 22:57:11 GMT
content-type: text/css
last-modified: Mon, 22 Apr 2024 10:54:25 GMT
etag: W/"662641e1-1c0f5"
expires: Tue, 30 Apr 2024 22:57:11 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| telegram.org/img/tgme/pattern.svg?1 | 149.154.167.99 | 200 OK | 232 kB |
URL GET HTTP/2telegram.org/img/tgme/pattern.svg?1 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
Requested byhttps://t.me/gamee?start=ref_7045659616 CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30 ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File typeSVG Scalable Vector Graphics image Size232 kB (231706 bytes) Hashd0c22c6a97023d85ba6e644a41c44a5d 4284efb616c182da4450c123174ce0e81a322845 118add53487c02aaf5b5ab9f69380fa06717deb10492e14aaa487e3c62806ad4
GET /img/tgme/pattern.svg?1 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/css/telegram.css?237
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 26 Apr 2024 22:57:12 GMT
content-type: image/svg+xml
last-modified: Thu, 05 Jan 2023 17:52:04 GMT
etag: W/"63b70e44-3891a"
expires: Tue, 30 Apr 2024 22:57:12 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| telegram.org/img/website_icon.svg?4 | 149.154.167.99 | 200 OK | 1.9 kB |
URL GET HTTP/2telegram.org/img/website_icon.svg?4 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
Requested byhttps://t.me/gamee?start=ref_7045659616 CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30 ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File typeSVG Scalable Vector Graphics image Hash5caca7ae1cffb3da0b06150a15020005 04cfb934f238d33209406393a3fbf78454815739 1ea747a06fbc240c2594a8c523cb248bbda4784f0fcad9d0f06334f1a378604f
GET /img/website_icon.svg?4 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 26 Apr 2024 22:57:12 GMT
content-type: image/svg+xml
last-modified: Mon, 20 Jul 2020 20:41:37 GMT
etag: W/"5f160181-768"
expires: Tue, 30 Apr 2024 22:57:12 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| |  104.26.4.19 | 301 Moved Permanently | 11 kB |
URL User Request GET HTTP/2IP104.26.4.19:443
CertificateIssuerGoogle Trust Services LLC Subjectsurl.li Fingerprint4A:8A:47:88:45:49:9E:79:20:E2:25:13:21:0D:14:FD:40:9F:73:38 ValiditySat, 30 Mar 2024 17:55:26 GMT - Fri, 28 Jun 2024 17:55:25 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /szwna HTTP/1.1
Host: surl.li
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 26 Apr 2024 22:57:11 GMT
content-type: text/html
location: https://t.me/gamee?start=ref_7045659616
x-powered-by: PHP/8.2.15
set-cookie: XSRF-TOKEN=eyJpdiI6IittWVl3QzBTRy9RemE5UndVdXhSZGc9PSIsInZhbHVlIjoiQXVUNGpQcnRIbXlkV2RTWmhxL2tyOStJcTE3aEF0NnVTMzluVlQxZEl0YW5uNm95dTU0NlFVMG0yeUdkSkhRc1RURHptajZiSGppcEJVUVJXV1lZejB4aVZSbHd4UVpibUpSZ0FHTEM1dmpDcDdjakhLS2NYTk9sdGk1RDdxeEEiLCJtYWMiOiIxMTY3OWQ5OTc5M2Y1N2JhNzY1YmRlOGM5OTNlYmM0OTFjMmNjZmJlODBlYWVkYjI2OTgyZTM3NWU0ZDg1OTk1IiwidGFnIjoiIn0%3D; expires=Sat, 27 Apr 2024 00:57:11 GMT; Max-Age=7200; path=/; secure; samesite=lax
surli_application_session=eyJpdiI6IkJpRldEbmoxMTdwQzd3MEl1bSt4S0E9PSIsInZhbHVlIjoiRTcwdTJXSHk2YzkxYXdYMVF3bHR4QmxlcE5XMUh4RmpIYWZuL0tITXZJdnl4MFpESlVhUWE4czZBOVhNQXFvWXUzNmxIVUdNOW9LY296NFhEWU1uVXdxRDBXNndqV2ptMUVXRWpxMW13MzhBcmphOUJwQ1dacC9ob1hYWUdmUHIiLCJtYWMiOiJkMWIxMWZmNTFlOThmNDYwNGY3ZTI2ZTg1ODhkNzRiYTJkZmQ1MGUyODAwYzFmNWNmNWVkOTg2ZDRkMTk0NGY5IiwidGFnIjoiIn0%3D; expires=Sat, 27 Apr 2024 00:57:11 GMT; Max-Age=7200; path=/; httponly; samesite=lax
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uDDSZVKrBVb9jpTB5Cd0eKJGPPVyqTseSdM62R%2F7F3lXWEgaphCp%2B%2FxofWdOkxNpOXiOIJfWOXk9XM6bTQmUCmvSy3XlPicg7thGKhlXNDeFsMQbAlF17ig%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87aa2b9c581a56b7-OSL
X-Firefox-Spdy: h2
|
|
| telegram.org/css/font-roboto.css?1 | 149.154.167.99 | 200 OK | 6.2 kB |
URL GET HTTP/2telegram.org/css/font-roboto.css?1 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
Requested byhttps://t.me/gamee?start=ref_7045659616 CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30 ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File typeASCII text, with very long lines (6354), with no line terminators Hashc06318a1f377e388b69b104b4cefa1a6 151f067aae997487880e573876f96b8d598e64db 1a53363e667fffef8a82588191989d36e680b4d341c6b557e62bf207311a3d70
GET /css/font-roboto.css?1 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 26 Apr 2024 22:57:11 GMT
content-type: text/css
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: W/"63512b7d-1816"
expires: Tue, 30 Apr 2024 22:57:11 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| telegram.org/js/tgwallpaper.min.js?3 | 149.154.167.99 | 200 OK | 3.0 kB |
URL GET HTTP/2telegram.org/js/tgwallpaper.min.js?3 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
Requested byhttps://t.me/gamee?start=ref_7045659616 CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30 ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File typeASCII text, with very long lines (2998), with no line terminators Hashf03422dc797fd26a3834b1ec041128ed a6e88f4fe48b749c2b7360e8e004f64b6cfffb1a 046ec6b7909d0ca5cc6ef271a1b57b2f2be0bd88e3495fd8c496f1524e8ffaac
GET /js/tgwallpaper.min.js?3 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 26 Apr 2024 22:57:11 GMT
content-type: application/javascript
last-modified: Thu, 03 Mar 2022 19:57:25 GMT
etag: W/"62211da5-ba3"
expires: Tue, 30 Apr 2024 22:57:11 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
|
|