{"report_id":"1a1d07d8-a2b5-4e5e-a7ab-e712430aaae7","version":0,"status":"done","tags":[],"date":"2026-08-23T15:26:55Z","url":{"schema":"http","addr":"account-verify.cyou/","fqdn":"account-verify.cyou","domain":"account-verify.cyou","tld":"cyou"},"ip":{"addr":"193.84.3.214","port":0,"asn":57043,"as":"Hostkey B.v.","country":"Finland","country_code":"FI"},"final":{"url":{"schema":"https","addr":"telegram.org/","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"title":"Telegram Messenger","dom":{"size":19868,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3602)","md5":"8aa98381b22a971678ec4cc9d560630f","sha1":"64ba432620703e2b5781b95ef195a09d890a80f0","sha256":"56f5b1d22b5a11364f1a0c107a8f2da685e36c2626ac54e5411b02c9c338f0ce","sha512":"7aeea7e840907832f6a74ffcd17992ebed890e94004fcf4f095e941020ab0a73a7c7f85e6fa3bf5175cd35a877b14ac858f3308734f19d60db21d870e483f6bf","ssdeep":"384:yQ+fx4icjpSSklcjtGJuLbmw5ciq++9iD/OQbBtmiNYzbCVg2bR:nJic/6cjtiiq++9iDWQbBtmiNYzbCVgM","tlshash":"399242ab53b8a02241e34bce7b256b1abaa3d05fc75a0b01717c5a476f87d92cd5340d","dom_hash":"domhash59bbe50c8a0020c93da5c51a778e3049","first_seen":"2026-07-19T03:56:17.13138Z","last_seen":"2026-08-23T15:27:01.699728Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"account-verify.cyou/","fqdn":"account-verify.cyou","domain":"account-verify.cyou","tld":"cyou"},"ip":{"addr":"193.84.3.214","port":0,"asn":57043,"as":"Hostkey B.v.","country":"Finland","country_code":"FI"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-27T15:26:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"account-verify.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-08-20T07:07:16.890001Z","alert_count":0,"request_count":53,"received_data":2522456,"sent_data":29358,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"account-verify.cyou","ip":{"addr":"193.84.3.214","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Finland","country_code":"FI"},"domain_registered":"2026-08-21","domain_rank":0,"first_seen":"2026-08-23T15:26:56.734593Z","last_seen":"2026-08-23T15:26:56.734593Z","alert_count":1,"request_count":1,"received_data":201,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"telegram.org/js/pako-inflate.min.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"","is_inline":false,"md5":"8e548b1ad991b0cd636a7e4939e3c420","sha1":"ffacc63c9b5d77b0597f9c054ca349312626a5fe","sha256":"2ca27e9a8dae569cdeac42752ed1aed1afeff7f19282d3cc12c0aaa54a08bc04","sha512":"5eae750bdf8c8d073a9930518d7a5406e2335946f124da9af0acf1a9c35ed2171c5bf7511bdf647a7037ff3557d83ec6e2fe7dcfc9c30f18c13d34c051335158","ssdeep":"384:1nx7is2gm0cNqoi+Ho9Jzb1g06AcnsQGb5:ZngP09Jzq06ASsX1","tlshash":"45a2098f21b4555552e695f800ef39c760b988332d084c7a5634def0a1b58cfe26ecbb","size":22682,"data":"","first_seen":"2023-05-15T10:52:59Z","last_seen":"2026-08-23T17:06:25.305334Z","times_seen":1501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/tgsticker.js?32","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca7e6255b72c88eeaa894e4e9911d92a","sha1":"421971a0502124c418fef2cef668684c9af51bb8","sha256":"df204764ab3ecf3d6ef9dd2daf74fa8f492da6ac4acb06cc620eabca485e09da","sha512":"63d4a8146dad357957cfe847d4e8e34ee84a2785b89ea14e83d2487663082d66af9c69941ff45c85f57472f2530a0d04bd645875933ad15fe3c4d22c0e527f6b","ssdeep":"192:HahNCO9aaOWUbiYyai2kWYipNtUxSi0EBh718jpwyYqaiEjKsnGLUtGrNixayya9:ni1ZGAUH2qL1KPINofFnuefd","tlshash":"e1c2d04d89af6125a023702dbb6f510632348007790ede70f94ce798af9952f16b6fed","size":26457,"data":"","first_seen":"2026-06-29T01:40:31.30969Z","last_seen":"2026-08-23T17:06:25.31407Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/tgsticker-worker.js?14","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"","is_inline":false,"md5":"a3eecfb5cd60979b65af8ef49bb66045","sha1":"d4c4eaab526e88c2eb58339a28207dba967be384","sha256":"b508251f81df8fda1990736e14135063e5421f6c424734c90b263d8bdfc944e9","sha512":"993c542fd86adac3c737dea3c19e2cf1a12dd128e69550e7db8933e3062e778668988ba496bf88b29e0d3dda303b5bb1f80aba11d6116a77653d30183f04ae54","ssdeep":"96:vYYD4PDKthWNRm/Qr7JTdAvAjDIRHO9slZe2gLaFB6ASqJlias7:vPMuhWNRmor7JT+vAjcRISSLa36ASqJ0","tlshash":"01c1974d6afa20165023b52ace6f19093639c01bb51ddf58b69c4bc41f92d3846faff8","size":5937,"data":"","first_seen":"2023-09-05T15:09:53Z","last_seen":"2026-08-23T17:06:25.333834Z","times_seen":852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/rlottie-wasm.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"","is_inline":false,"md5":"9b31c5083355b2aaaaaec512f3a0021d","sha1":"395c9925e89a0ae66f0e016ae664c0aabfd64865","sha256":"59df8caec8e28f1dd238c2f59fdb02854b51da69b0bc1a18271c502a9a166295","sha512":"2b1c65386a00fe87d1b74d319dbd9f421a5873e5c1b32e0fec801a03444acce9c35d2f4ac3c6def701c885347f750408de8e948abc28dbe306c76c088e9694b8","ssdeep":"1536:yWbjzXwlvEwbDey5wOl3vkiXo3pJR/wxQGlImvDshx:yW2vVbDeyCOl6J3GumvDs","tlshash":"55a3098579e531b682c73779a86f260eb2bb5c43581c8014da19ece06cb4f5da43ff98","size":100601,"data":"","first_seen":"2023-05-18T20:55:30Z","last_seen":"2026-08-23T17:06:25.338372Z","times_seen":1519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/main.js?49","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"71abaf0fcc7b40032417676f384a1e35","sha1":"b532872ea6b756507ff7ee07f354904e92c1bd39","sha256":"cd76e186bca4baa7b41d94c367295cb219ead4886d67c3ef0d7d51ddc38881c4","sha512":"bee517da7d4fd73492aae2a60d42bb2ad9eab26de33def7499b8ee43ee41dbcdffb58fe098e17428c8b645a7f30508ead72231f45b3b443adc77354c94aee860","ssdeep":"384:FCxaBo7s5dibe4UX4BXnasovLi1xPSoGBejIfD5FOhPOwIc:FCxko7U/Li1xdGFTeIc","tlshash":"eaa2616879f33036586b72796baf9249377400475009df007c2eda986fa1e3626fafd4","size":21952,"data":"","first_seen":"2026-06-30T13:29:12.404938Z","last_seen":"2026-08-23T17:06:25.337806Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"18beb2f3ac04d8b61978c5e3d07b6781","sha1":"cf54063957d29c034879ced1b7796a1a5fe71791","sha256":"3a05c29c879360bf1910708049fcd937af2a89e35d241477c18987c8413f9392","sha512":"f7df7444af098260dcd78b37c6962c985dc7270ea60f48383946c180f766796afd4cc8f3337be5f8a6d24a39ba6de1d1566e7b2d17acb1f310abe3cbe4c15999","ssdeep":"","tlshash":"74d0229db8d2001a1df12cafff33920568c4c839eef00282100bc58e20a847c21b608d","size":200,"data":"","first_seen":"2026-06-08T06:37:09.578268Z","last_seen":"2026-08-23T15:27:01.752133Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"eventHandler","is_inline":false,"md5":"c6e15e7dda04f3f6b56c030720af96c1","sha1":"c17f68c0c208278c99f2722b409708e237afa33f","sha256":"ef56164ef4b97535f1c9a8d0c8881102dfaea43d735f8ead528cd73ad479376b","sha512":"4ae9f3bd334f7e264fe3e680cea4229625c73223327e8a2c3f0dd784149fdb4bddc1f3436cb63dceeceaa6f45cedbbd9a0bd546cdc1a3da4286bc01c94f9bc89","ssdeep":"","tlshash":"d9800022cb8b2000c028200088000a220308080be82b0028300b2a2c0282828c0a80a2","size":27,"data":"","first_seen":"2024-01-25T15:53:31Z","last_seen":"2026-08-23T15:27:01.754841Z","times_seen":132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/main-theme.js?6","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"97ba453c5c8f1e21f944d3432a251758","sha1":"3cf5c76e86172e16e851afae89f263a4b1910a6a","sha256":"0cf24b6eaaf0cf09dbc85e1d199f5f83f56814ffb15ca9b9df0201cec689f8b0","sha512":"c54eac5ea12ef7c61136e2f049213826a82344a10aa34a3877270f56814de1bc600a4209249dcbe98eea2729433da5b0f6867d78b951271698923e956336656c","ssdeep":"384:PaNvbqVQF3PQi8YkHuc+/jF0SrL9JDKDLLssxu1+5O7:PFVQF4jYjc+BP9JDK3LsO47","tlshash":"e292c6596ea32177a423317dc75fa159f23a84136246c640bc1ce2482fa097793bdfec","size":19680,"data":"","first_seen":"2026-06-30T23:11:31.673153Z","last_seen":"2026-08-23T17:06:25.314684Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[0.005] tgsticker init","filename":"https://telegram.org/js/tgsticker.js?32","line_number":117,"column_number":17},{"level":"log","text":"[0.286] worker #0 ready","filename":"https://telegram.org/js/tgsticker.js?32","line_number":688,"column_number":15},{"level":"log","text":"[0.502] worker #1 ready","filename":"https://telegram.org/js/tgsticker.js?32","line_number":700,"column_number":23},{"level":"log","text":"[0.515] worker #2 ready","filename":"https://telegram.org/js/tgsticker.js?32","line_number":700,"column_number":23},{"level":"log","text":"[0.528] worker #3 ready","filename":"https://telegram.org/js/tgsticker.js?32","line_number":700,"column_number":23},{"level":"log","text":"[0.528] workers ready","filename":"https://telegram.org/js/tgsticker.js?32","line_number":705,"column_number":25},{"level":"error","text":"Error while calling actor 'source's method 'source'Could not load the source for https://telegram.org/js/rlottie-wasm.wasm.\nError: WebAssembly binary source is not available\nStack: _getSourceText@resource://devtools/server/actors/source.js:241:20\nsource@resource://devtools/server/actors/source.js:541:51\nhandler@resource://devtools/shared/protocol/Actor.js:228:37\nonPacket@resource://devtools/server/devtools-server-connection.js:371:58\n_onMessage@resource://devtools/shared/transport/worker-transport.js:104:18\nLine: 241, column: 20","filename":"resource://devtools/shared/protocol/Actor.js","line_number":112,"column_number":13},{"level":"error","text":"Could not load the source for https://telegram.org/js/rlottie-wasm.wasm.\nError: WebAssembly binary source is not available\nStack: _getSourceText@resource://devtools/server/actors/source.js:241:20\nsource@resource://devtools/server/actors/source.js:541:51\nhandler@resource://devtools/shared/protocol/Actor.js:228:37\nonPacket@resource://devtools/server/devtools-server-connection.js:371:58\n_onMessage@resource://devtools/shared/transport/worker-transport.js:104:18\nLine: 241, column: 20","filename":"resource://devtools/shared/protocol/Actor.js","line_number":119,"column_number":15},{"level":"error","text":"Error while calling actor 'source's method 'source'Could not load the source for https://telegram.org/js/rlottie-wasm.wasm.\nError: WebAssembly binary source is not available\nStack: _getSourceText@resource://devtools/server/actors/source.js:241:20\nsource@resource://devtools/server/actors/source.js:541:51\nhandler@resource://devtools/shared/protocol/Actor.js:228:37\nonPacket@resource://devtools/server/devtools-server-connection.js:371:58\n_onMessage@resource://devtools/shared/transport/worker-transport.js:104:18\nLine: 241, column: 20","filename":"resource://devtools/shared/protocol/Actor.js","line_number":112,"column_number":13},{"level":"error","text":"Could not load the source for https://telegram.org/js/rlottie-wasm.wasm.\nError: WebAssembly binary source is not available\nStack: _getSourceText@resource://devtools/server/actors/source.js:241:20\nsource@resource://devtools/server/actors/source.js:541:51\nhandler@resource://devtools/shared/protocol/Actor.js:228:37\nonPacket@resource://devtools/server/devtools-server-connection.js:371:58\n_onMessage@resource://devtools/shared/transport/worker-transport.js:104:18\nLine: 241, column: 20","filename":"resource://devtools/shared/protocol/Actor.js","line_number":119,"column_number":15},{"level":"error","text":"Error while calling actor 'source's method 'source'Could not load the source for https://telegram.org/js/rlottie-wasm.wasm.\nError: WebAssembly binary source is not available\nStack: _getSourceText@resource://devtools/server/actors/source.js:241:20\nsource@resource://devtools/server/actors/source.js:541:51\nhandler@resource://devtools/shared/protocol/Actor.js:228:37\nonPacket@resource://devtools/server/devtools-server-connection.js:371:58\n_onMessage@resource://devtools/shared/transport/worker-transport.js:104:18\nLine: 241, column: 20","filename":"resource://devtools/shared/protocol/Actor.js","line_number":112,"column_number":13},{"level":"error","text":"Could not load the source for https://telegram.org/js/rlottie-wasm.wasm.\nError: WebAssembly binary source is not available\nStack: _getSourceText@resource://devtools/server/actors/source.js:241:20\nsource@resource://devtools/server/actors/source.js:541:51\nhandler@resource://devtools/shared/protocol/Actor.js:228:37\nonPacket@resource://devtools/server/devtools-server-connection.js:371:58\n_onMessage@resource://devtools/shared/transport/worker-transport.js:104:18\nLine: 241, column: 20","filename":"resource://devtools/shared/protocol/Actor.js","line_number":119,"column_number":15},{"level":"error","text":"Error while calling actor 'source's method 'source'Could not load the source for https://telegram.org/js/rlottie-wasm.wasm.\nError: WebAssembly binary source is not available\nStack: _getSourceText@resource://devtools/server/actors/source.js:241:20\nsource@resource://devtools/server/actors/source.js:541:51\nhandler@resource://devtools/shared/protocol/Actor.js:228:37\nonPacket@resource://devtools/server/devtools-server-connection.js:371:58\n_onMessage@resource://devtools/shared/transport/worker-transport.js:104:18\nLine: 241, column: 20","filename":"resource://devtools/shared/protocol/Actor.js","line_number":112,"column_number":13},{"level":"error","text":"Could not load the source for https://telegram.org/js/rlottie-wasm.wasm.\nError: WebAssembly binary source is not available\nStack: _getSourceText@resource://devtools/server/actors/source.js:241:20\nsource@resource://devtools/server/actors/source.js:541:51\nhandler@resource://devtools/shared/protocol/Actor.js:228:37\nonPacket@resource://devtools/server/devtools-server-connection.js:371:58\n_onMessage@resource://devtools/shared/transport/worker-transport.js:104:18\nLine: 241, column: 20","filename":"resource://devtools/shared/protocol/Actor.js","line_number":119,"column_number":15}]},"http":[{"url":{"schema":"https","addr":"telegram.org/img/t_main_Android_demo.mp4","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.885Z","timestamp":1787498786885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/t_main_Android_demo.mp4 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 250838\r\nlast-modified: Sat, 09 May 2020 18:58:54 GMT\r\netag: \"5eb6fd6e-3d3d6\"\r\nexpires: Thu, 27 Aug 2026 15:26:26 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-range: bytes 0-250837/250838\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":250838,"size_decoded":251192,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"36bebc24f7516d37cbfbb4ee2aedf6f6","sha1":"c40bb63cbe7c48f67faf8db89240fd60f912e1ce","sha256":"03b2ae439d25e00e297b01942883f4ef8a6a5c87e01dd0faec6f1eef24b92816","sha512":"3d2864b0559642b0928f6a131b4e718d001cb6fa805faa4bcfe275fd051ad9f34d3434433f9819d31aec495fb8daf42f662250b304883c4bd8eaf4ea729abbf2","ssdeep":"6144:XdGaIZbpxUi1c9H9ItxUbrHXBpmSr0t7ZsbAx4UMgHZ:QaItmh9ItGbrRASr2J5","tlshash":"133402a215689f66f774c33ba0b512172b41044e0324ef3e5ffceba15b21eb21a69d61","first_seen":"2023-05-15T10:52:59Z","last_seen":"2026-08-23T15:27:01.703679Z","times_seen":1176,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/file/464001166/1/01aTJ2ISKeU.21801/24028c7b6d07639794","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.org/js/tgsticker-worker.js?14","date":"2026-08-23T15:26:27.410Z","timestamp":1787498787410,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /file/464001166/1/01aTJ2ISKeU.21801/24028c7b6d07639794 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/js/tgsticker-worker.js?14\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 21535\r\ncache-control: max-age=2592000, public\r\nexpires: Fri, 11 Sep 2026 22:49:15 GMT\r\netag: \"659450b658f9d14c28dc526221f345cf9958a64f\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21801,"size_decoded":21919,"mime_type":"text/html; charset=UTF-8","magic":"data","md5":"b7800e8172d57f9d4e1b2bcf649fee38","sha1":"07ed81dfd34093dfab4c1365a6fa9e3d99fcf057","sha256":"5c382c842d0525b5034a4f4c302f32ecda276d29d4eafdfb27011daed5d35390","sha512":"8ce53c25515d2161eec72727348984cba611a700dccc78444bb43d7f056cb2db73770182be506df9997f125e4c34b10a7b51b063852c57c2458eee6034b4cd29","ssdeep":"768:Fk2R/s7jSfKYjzDPyhqHXPAtYQ0Xs1jc9LWZmPC0A5u2lR3sEhL/gR:FnR/xfKYn2hz0XoDkPz0u2PcMM","tlshash":"6ae2d02b2261f3e0a0fdd9f9212318c85104bed99558786acd24c7f13eaa13dd7de4d1","first_seen":"2023-05-15T10:52:59Z","last_seen":"2026-08-23T15:27:01.705057Z","times_seen":669,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/themeMoon.webp","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.779Z","timestamp":1787498786779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/themeMoon.webp HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/css/telegram-theme.css?7\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1220\r\nlast-modified: Fri, 26 Jun 2026 17:23:16 GMT\r\netag: \"6a3eb584-4c4\"\r\nexpires: Thu, 27 Aug 2026 15:26:26 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1220,"size_decoded":1555,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"271960d556bf3e55d9526ea0ac199efc","sha1":"e8bd465fcd20bf85a35ac046f4522c2d9b6579b9","sha256":"743dbd68da073a7956c313f605d97b34900bcd315791c1306e96511147d737a0","sha512":"5945be1cc1130a05675026962e55876d5f09b27cfd483459b2dff630f74da07b1dbb99ee4e603311459a5ae426b4e07757fbcb3da52cc4f03a833db1515b7b90","ssdeep":"","tlshash":"ac21b670af28560df5432ab461f11b43f2397e218a154b1a4240df6a6f084d559c82cf","first_seen":"2026-06-30T13:29:12.393212Z","last_seen":"2026-08-23T17:06:25.336658Z","times_seen":35,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/pako-inflate.min.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.org/js/tgsticker-worker.js?14","date":"2026-08-23T15:26:27.328Z","timestamp":1787498787328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/pako-inflate.min.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/js/tgsticker-worker.js?14\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 04 Oct 2019 11:37:17 GMT\r\netag: W/\"5d972eed-589a\"\r\nexpires: Thu, 27 Aug 2026 15:26:27 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22682,"size_decoded":9048,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22681)","md5":"8e548b1ad991b0cd636a7e4939e3c420","sha1":"ffacc63c9b5d77b0597f9c054ca349312626a5fe","sha256":"2ca27e9a8dae569cdeac42752ed1aed1afeff7f19282d3cc12c0aaa54a08bc04","sha512":"5eae750bdf8c8d073a9930518d7a5406e2335946f124da9af0acf1a9c35ed2171c5bf7511bdf647a7037ff3557d83ec6e2fe7dcfc9c30f18c13d34c051335158","ssdeep":"384:1nx7is2gm0cNqoi+Ho9Jzb1g06AcnsQGb5:ZngP09Jzq06ASsX1","tlshash":"45a2098f21b4555552e695f800ef39c760b988332d084c7a5634def0a1b58cfe26ecbb","first_seen":"2023-05-15T10:52:59Z","last_seen":"2026-08-23T17:06:25.305334Z","times_seen":1501,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/website_icon.svg?4","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.926Z","timestamp":1787498786926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/website_icon.svg?4 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 20 Jul 2020 20:41:37 GMT\r\netag: W/\"5f160181-768\"\r\nexpires: Thu, 27 Aug 2026 15:26:26 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1896,"size_decoded":1369,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"02f7553e1ac3129cd1c4d0442b5a0f81","sha1":"0dd8634450681fe1a2d0c1e5b02d6d0954e2772d","sha256":"0019255c610cb0843c524d7995905fa5201651fcc393846bee8414f0610097f5","sha512":"ac141a5648a3a22ceb295de8ecc6823f53d2a453316cd591dde888715344a60694316e1b85a5ceec72af62e34cc3d01768b020e5dfd5e0cb9916ec975ba4318e","ssdeep":"","tlshash":"1d41959d23ba14faf245c768d82560076a6704b7664980e4f08d6bfdaf180f3cb9d8d5","first_seen":"2023-05-31T00:52:27Z","last_seen":"2026-08-23T17:06:25.352395Z","times_seen":20399,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/rlottie-wasm.wasm","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://telegram.org/js/tgsticker-worker.js?14","date":"2026-08-23T15:26:27.096Z","timestamp":1787498787096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/rlottie-wasm.wasm HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://telegram.org/js/tgsticker-worker.js?14\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: application/wasm\r\nlast-modified: Tue, 14 Jul 2020 22:03:36 GMT\r\netag: W/\"5f0e2bb8-5f508\"\r\nexpires: Thu, 27 Aug 2026 15:26:27 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":390408,"size_decoded":155189,"mime_type":"application/wasm","magic":"WebAssembly (wasm) binary module version 0x1 (MVP)","md5":"e725dc036ad50ba694c90ee1f72c4b5b","sha1":"09f0eded8aa4ceb9ab1b326f5265dcbe9fc0b8e8","sha256":"f50ed354fd14cce39533af5fc58c0e4387a326748114c57a2ce3c98611da673b","sha512":"17d8775abb9180793c44278c36c7f5b9cc0609ae75ce0696763b6a5de8a81d27a656b6b3b1665ddc2c7fe9cf3816e509def22ef71119ce0de6f9d404041d86c3","ssdeep":"6144:y+3z9vKn2z9vyj+9R08Wcdmwdq6O2IQMKzoWVl7cunjfHjr5sP17RhnFJ/W:yMzZdR08a6O2IQMKzoWVl7cqjfHjr5sE","tlshash":"59840813e62b0879f401a8774d0f753337969444b2d870a1d7ad28ab7dffe89618ab70","first_seen":"2023-05-19T21:44:44Z","last_seen":"2026-08-23T17:06:25.304637Z","times_seen":284,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/rlottie-wasm.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.org/js/tgsticker-worker.js?14","date":"2026-08-23T15:26:27.286Z","timestamp":1787498787286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/rlottie-wasm.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/js/tgsticker-worker.js?14\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Jul 2020 22:03:36 GMT\r\netag: W/\"5f0e2bb8-188f9\"\r\nexpires: Thu, 27 Aug 2026 15:26:27 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100601,"size_decoded":31689,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9b31c5083355b2aaaaaec512f3a0021d","sha1":"395c9925e89a0ae66f0e016ae664c0aabfd64865","sha256":"59df8caec8e28f1dd238c2f59fdb02854b51da69b0bc1a18271c502a9a166295","sha512":"2b1c65386a00fe87d1b74d319dbd9f421a5873e5c1b32e0fec801a03444acce9c35d2f4ac3c6def701c885347f750408de8e948abc28dbe306c76c088e9694b8","ssdeep":"1536:yWbjzXwlvEwbDey5wOl3vkiXo3pJR/wxQGlImvDshx:yW2vVbDeyCOl6J3GumvDs","tlshash":"55a3098579e531b682c73779a86f260eb2bb5c43581c8014da19ece06cb4f5da43ff98","first_seen":"2023-05-18T20:55:30Z","last_seen":"2026-08-23T17:06:25.338372Z","times_seen":1519,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/pako-inflate.min.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.org/js/tgsticker-worker.js?14","date":"2026-08-23T15:26:27.344Z","timestamp":1787498787344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/pako-inflate.min.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/js/tgsticker-worker.js?14\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 04 Oct 2019 11:37:17 GMT\r\netag: W/\"5d972eed-589a\"\r\nexpires: Thu, 27 Aug 2026 15:26:27 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22682,"size_decoded":9048,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22681)","md5":"8e548b1ad991b0cd636a7e4939e3c420","sha1":"ffacc63c9b5d77b0597f9c054ca349312626a5fe","sha256":"2ca27e9a8dae569cdeac42752ed1aed1afeff7f19282d3cc12c0aaa54a08bc04","sha512":"5eae750bdf8c8d073a9930518d7a5406e2335946f124da9af0acf1a9c35ed2171c5bf7511bdf647a7037ff3557d83ec6e2fe7dcfc9c30f18c13d34c051335158","ssdeep":"384:1nx7is2gm0cNqoi+Ho9Jzb1g06AcnsQGb5:ZngP09Jzq06ASsX1","tlshash":"45a2098f21b4555552e695f800ef39c760b988332d084c7a5634def0a1b58cfe26ecbb","first_seen":"2023-05-15T10:52:59Z","last_seen":"2026-08-23T17:06:25.305334Z","times_seen":1501,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/SiteIconApple.svg","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.797Z","timestamp":1787498786797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/SiteIconApple.svg HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/css/telegram-theme.css?7\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 443\r\nlast-modified: Mon, 18 Apr 2022 20:19:52 GMT\r\netag: \"625dc7e8-1bb\"\r\nexpires: Thu, 27 Aug 2026 15:26:26 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":443,"size_decoded":780,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"008103375773357b988bf6b4e7dff3f3","sha1":"908ca865ac3a7f6b57dc7d5db70a429cff959e98","sha256":"a5c59c1b52f5dd4d1c06a628f27079f4481d0ee7b40bccd1cd91ff963e2d674f","sha512":"38838694555700db092b3acd3ea9db83edf59df7867bc952fb29218b840629ecd7882da1f67bbe59a61bc0635223d75f2b3c72ebc7c870ebeb1eed57f9cecc1b","ssdeep":"","tlshash":"12f0dcc5974cc7740327ca60cf3381257d07c091274020e960719372306eddbd84a538","first_seen":"2023-05-09T05:29:39Z","last_seen":"2026-08-23T15:27:01.716802Z","times_seen":997,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/css/telegram.css?254","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.703Z","timestamp":1787498786703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /css/telegram.css?254 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Jul 2026 14:41:45 GMT\r\netag: W/\"6a5104a9-1dd26\"\r\nexpires: Thu, 27 Aug 2026 15:26:26 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":122150,"size_decoded":31370,"mime_type":"text/css","magic":"ASCII text, with very long lines (1267)","md5":"175ac83fd4f16c07075cf66528fbc0db","sha1":"de9fa505061e586442e651e6ae5a814160a0f3ea","sha256":"b7d3bbab7ae0c019d4e01f3d1d1d1f1c1466c88f9fcd12a795612d7c05e93ec3","sha512":"4782c2e0b38c43f909604915117750b8e86b028f2397ef736efe378b345d78757f2b1c58aa2d8341bf81750f0e637c965faaa5c04ea5663109d968e198e4493a","ssdeep":"1536:cyqIEDxTvbJ3iw9HBC2WXdB791WoDYzvhw5uJuh0JlNpfewltog69FjxWDp+xx6N:cyqIYxTvww2rXXC0YzWvL5u","tlshash":"7dc382db9bb99604742b80687ea35b52337d8003a54ece7dbba1306cefc5ad48173749","first_seen":"2026-07-11T05:54:56.315328Z","last_seen":"2026-08-23T17:06:25.357701Z","times_seen":219,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/file/400780400366/6/dI0zgi0mM5s.323818.webp/6a362dadee6e7e6011","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.716Z","timestamp":1787498786716,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /file/400780400366/6/dI0zgi0mM5s.323818.webp/6a362dadee6e7e6011 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 323355\r\ncache-control: max-age=2592000, public\r\nexpires: Sat, 12 Sep 2026 15:13:24 GMT\r\netag: \"38f3952ef5a7a16201f98fc76d05c7b2cd546eb0\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":323818,"size_decoded":323726,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"673ea0301a7c1d6e349418586b0edd12","sha1":"9ccdfebe003f0e91a66db7ac3da77afd526e88e6","sha256":"8972f9d4f6a3d9853f7607ab77f0ef9d23ec960ea052db760e83c870abd4ca48","sha512":"85b960b0381203dd5289c5953caf7208be8b854d4a41983c9762fc1b4117e546f9a559d8f0e8415c238944f0dc6b409322d8e4a5c4aacd167940456073eb83f4","ssdeep":"6144:oYVh2EDYkBDvxMK+vTWvLKQ6UECXcTPAtO9wK+FKJRl6UVh6uyR5D/xu:oYVhJVFWK+qeXOZtKwfUJj6UVh6xtu","tlshash":"326423f2fe654a42cb35907424f2f233581f295b75e22038a8d93d063fdb4c75a6266e","first_seen":"2026-07-18T15:06:07.038278Z","last_seen":"2026-08-23T17:06:25.315313Z","times_seen":18,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/file/464001737/4/Fn57W9l3xI0.15286.png/d4b936ecc2c939f4fa","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.721Z","timestamp":1787498786721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /file/464001737/4/Fn57W9l3xI0.15286.png/d4b936ecc2c939f4fa HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 15309\r\ncache-control: max-age=2592000, public\r\nexpires: Mon, 07 Sep 2026 12:29:13 GMT\r\netag: \"93939a07f86b42b04b779841ba81a1ef4ba2d929\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15286,"size_decoded":15678,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"5f245ac9016657dfafcbdbf61b61e514","sha1":"4033c942a333f667ef26c5d45ed5e233bd83b8b9","sha256":"006d88e7389f56f925cdac325a2d6fc7956bbdcc30e46214bdd97b43274bd78e","sha512":"0be5306b2867b719a1b6736784ab063a6186d7187bb5378fa225e4f6eee5db31e18a56fbf05f2874f02e52c028e74bff6c3ab6854f9cdd821c80d7f8bc4baa3f","ssdeep":"384:LhEEnY6rtlrWDBX5s7eLvvRjx7HFYSTKavK4Pjwglq:NEEXrtlrWDHs7eLRt7Ha4vq","tlshash":"fd62cfd60b8be7d3044b62d8c4a127357756c050ac9d0c734abec2396bcb90f6263aa6","first_seen":"2023-05-09T05:29:39Z","last_seen":"2026-08-23T15:27:01.719179Z","times_seen":1206,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/sun_outline.tgs","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.org/js/tgsticker-worker.js?14","date":"2026-08-23T15:26:27.392Z","timestamp":1787498787392,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/sun_outline.tgs HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/js/tgsticker-worker.js?14\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1794\r\nlast-modified: Fri, 26 Jun 2026 17:23:16 GMT\r\netag: \"6a3eb584-702\"\r\nexpires: Thu, 27 Aug 2026 15:26:27 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1794,"size_decoded":2143,"mime_type":"application/octet-stream","magic":"gzip compressed data, was \"sun_outline.json\", last modified: Thu Jun 18 20:12:55 2026, max compression, from Unix","md5":"80cff0069d78ce405699f08311358efe","sha1":"a849d79d1505daaadcb6cd8afcb023bdd5f0392e","sha256":"4b6cc1204526caabb151fc4e5e5f590e267b06e2809628e3819e53ae59378777","sha512":"6c8c95317d8607fb00792a1ec55fc0cc584d223133dc254758324b906dc66838dcd4bfc99814352db0df76b2205e7cfc1ccd2abe0b9ef408f57038a138b0f759","ssdeep":"","tlshash":"5b314bd37018464549e4f201d4f4186b0f4eccc80c90e7990f0eaad66e58f83e239ab8","first_seen":"2026-06-30T13:29:12.379815Z","last_seen":"2026-08-23T17:06:25.342622Z","times_seen":35,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/file/464001484/1/bzi7gr7XRGU.10147/815df2ef527132dd23","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.org/js/tgsticker-worker.js?14","date":"2026-08-23T15:26:27.395Z","timestamp":1787498787395,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /file/464001484/1/bzi7gr7XRGU.10147/815df2ef527132dd23 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/js/tgsticker-worker.js?14\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 10170\r\ncache-control: max-age=2592000, public\r\nexpires: Fri, 11 Sep 2026 22:49:15 GMT\r\netag: \"19a8c01d40babdc6b063746c48554639d0ecd1a3\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10147,"size_decoded":10554,"mime_type":"text/html; charset=UTF-8","magic":"data","md5":"54d5a4d4df087918c0b548eaeb0e0b56","sha1":"f85aed693897891b41105668c9297ed737b0b21e","sha256":"535b39393a255eec77eb8d75cd75eef87fc11a61e4ff8dd11e50ea2b846c363a","sha512":"a5fc7e58f4636df31793a375af37aa64be7c8543fb3634bdfa96df41748df2883f7f97251db7d5e7c6a01dce706113969259fd506b4fa44a1b8497f1fa06ff1a","ssdeep":"384:j/hnwwdq7Q8HntyOA5vgX5L2mp1/rQ6/SmC14J:jpnwwMZc1i5CmM6Va4J","tlshash":"fa52ae45d101fb85ebbfe4ea5d076fd0e326cdcc751aea55c928c6a0de2c621268d4c1","first_seen":"2023-05-15T10:52:59Z","last_seen":"2026-08-23T15:27:01.720677Z","times_seen":874,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/file/464001812/2/kLAK2TPyvUU.12545/f68c1caf735a2ea3db","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.org/js/tgsticker-worker.js?14","date":"2026-08-23T15:26:27.409Z","timestamp":1787498787409,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /file/464001812/2/kLAK2TPyvUU.12545/f68c1caf735a2ea3db HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/js/tgsticker-worker.js?14\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 12562\r\ncache-control: max-age=2592000, public\r\nexpires: Fri, 11 Sep 2026 22:49:15 GMT\r\netag: \"b7ec796537cf35a32fadf36637c066e16a679383\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12545,"size_decoded":12946,"mime_type":"text/html; charset=UTF-8","magic":"data","md5":"f6f5592c70d3e2ef30197fb425ca125a","sha1":"8d17f7f161a17147a94b3500fa091cb99b423979","sha256":"2a71a429a71ebf641d8edb174ac3997cf74b6e6019b6d80e32d179913327a4fe","sha512":"d5d55f7d96e68b34efa7b45931419f775b4a0341009aa8189e323142130679d8aa81e909374d5fda9fb0ff684a2c18d1c2cf6965de96d9da98f155c7ec2b684b","ssdeep":"384:TvCJweBjMbvljlaVT1mtuJyhCwNs1fcG0QnyjLDH5m6olRz/0R:mJ5ubv55uJyhCw6yjBm0R","tlshash":"cf82d0431243ff60d707ee77381b2ac1d614bf55f1a9ee8bd520d6e16c4542c6b8e8a2","first_seen":"2023-05-18T09:33:01Z","last_seen":"2026-08-23T15:27:01.721464Z","times_seen":742,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-23T15:26:26.375Z","timestamp":1787498786375,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 6135\r\nset-cookie: stel_ssid=81ed28452c6646df15_14859391319655795859; expires=Mon, 24 Aug 2026 02:33:06 GMT; path=/; samesite=None; secure; HttpOnly\r\npragma: no-cache\r\ncache-control: no-store\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"stel_ssid","value":"81ed28452c6646df15_14859391319655795859","quoted":false,"path":"/","expires":"2026-08-24T02:33:06Z","raw_expires":"Mon, 24 Aug 2026 02:33:06 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"stel_ssid=81ed28452c6646df15_14859391319655795859; expires=Mon, 24 Aug 2026 02:33:06 GMT; path=/; samesite=None; secure; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20000,"size_decoded":6603,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3596)","md5":"bfa7c703e550f2c6351ffd2341d17fe7","sha1":"4527c0c7520876d55c3e59be1b7d5537dfe5068f","sha256":"351d4c9a085328eafef929789e91a716825e5785d878e749944704e1c8bd7ee9","sha512":"7b48e339e81f955e30b16673bf4eb4272f261aa57c22a0b352f7a9b913ca0801d0f24e2c2902bac90a289aa2d4beb6a18f2444cd2763930133638eb30c62a74a","ssdeep":"384:EQ+fx4MzQpaklcjbGJuLbmw5viy+Y9iR/ONiCbBGBABijzqqE8unbmM6DklP2bN:NJMz96cjT1iy+Y9iRWN3bBGBABijzqql","tlshash":"2f9253a756b8a02351e34bde7b616b1a79a3e09fca5a0b01727c4a476fc3d92cd4340d","first_seen":"2026-08-23T15:27:01.722256Z","last_seen":"2026-08-23T15:27:01.722256Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":2,"connect":22,"send":0,"wait":58,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/tgsticker.js?32","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.710Z","timestamp":1787498786710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/tgsticker.js?32 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 26 Jun 2026 17:23:16 GMT\r\netag: W/\"6a3eb584-6759\"\r\nexpires: Thu, 27 Aug 2026 15:26:26 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26457,"size_decoded":7843,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ca7e6255b72c88eeaa894e4e9911d92a","sha1":"421971a0502124c418fef2cef668684c9af51bb8","sha256":"df204764ab3ecf3d6ef9dd2daf74fa8f492da6ac4acb06cc620eabca485e09da","sha512":"63d4a8146dad357957cfe847d4e8e34ee84a2785b89ea14e83d2487663082d66af9c69941ff45c85f57472f2530a0d04bd645875933ad15fe3c4d22c0e527f6b","ssdeep":"192:HahNCO9aaOWUbiYyai2kWYipNtUxSi0EBh718jpwyYqaiEjKsnGLUtGrNixayya9:ni1ZGAUH2qL1KPINofFnuefd","tlshash":"e1c2d04d89af6125a023702dbb6f510632348007790ede70f94ce798af9952f16b6fed","first_seen":"2026-06-29T01:40:31.30969Z","last_seen":"2026-08-23T17:06:25.31407Z","times_seen":70,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/xLogo.svg","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.791Z","timestamp":1787498786791,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/xLogo.svg HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/css/telegram-theme.css?7\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 430\r\nlast-modified: Fri, 26 Jun 2026 17:23:16 GMT\r\netag: \"6a3eb584-1ae\"\r\nexpires: Thu, 27 Aug 2026 15:26:26 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":430,"size_decoded":767,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0c9462a79f736453eac5bf7cbb756875","sha1":"cd9c6f8be71e64e10f561e2e260040238ff7f2ba","sha256":"dd46f96b6f47fcd33683b79ddfaf3daca1d4f8aeba3c0f2bde1584c69cc699d4","sha512":"ba0c8acc18c3f56f7887b3e9757f84da7c49d49ede2b56b5440650598c4d007a62f0d4589b7daf68c0f8dce98f40821104c4281c8c9fd426084e49f2978cbbc0","ssdeep":"","tlshash":"13e02363ad40c9812c0c9e62611ca0572fb761b9dbad4020c5885f2cf893ff5ed3d7aa","first_seen":"2023-08-23T14:35:05Z","last_seen":"2026-08-23T17:34:10.325348Z","times_seen":1857,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/tgsticker-worker.js?14","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:27.003Z","timestamp":1787498787003,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/tgsticker-worker.js?14 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Jun 2022 21:52:44 GMT\r\netag: W/\"62bcc9ac-1731\"\r\nexpires: Thu, 27 Aug 2026 15:26:27 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5937,"size_decoded":2720,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a3eecfb5cd60979b65af8ef49bb66045","sha1":"d4c4eaab526e88c2eb58339a28207dba967be384","sha256":"b508251f81df8fda1990736e14135063e5421f6c424734c90b263d8bdfc944e9","sha512":"993c542fd86adac3c737dea3c19e2cf1a12dd128e69550e7db8933e3062e778668988ba496bf88b29e0d3dda303b5bb1f80aba11d6116a77653d30183f04ae54","ssdeep":"96:vYYD4PDKthWNRm/Qr7JTdAvAjDIRHO9slZe2gLaFB6ASqJlias7:vPMuhWNRmor7JT+vAjcRISSLa36ASqJ0","tlshash":"01c1974d6afa20165023b52ace6f19093639c01bb51ddf58b69c4bc41f92d3846faff8","first_seen":"2023-09-05T15:09:53Z","last_seen":"2026-08-23T17:06:25.333834Z","times_seen":852,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/rlottie-wasm.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.org/js/tgsticker-worker.js?14","date":"2026-08-23T15:26:27.278Z","timestamp":1787498787278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/rlottie-wasm.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/js/tgsticker-worker.js?14\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Jul 2020 22:03:36 GMT\r\netag: W/\"5f0e2bb8-188f9\"\r\nexpires: Thu, 27 Aug 2026 15:26:27 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100601,"size_decoded":31689,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9b31c5083355b2aaaaaec512f3a0021d","sha1":"395c9925e89a0ae66f0e016ae664c0aabfd64865","sha256":"59df8caec8e28f1dd238c2f59fdb02854b51da69b0bc1a18271c502a9a166295","sha512":"2b1c65386a00fe87d1b74d319dbd9f421a5873e5c1b32e0fec801a03444acce9c35d2f4ac3c6def701c885347f750408de8e948abc28dbe306c76c088e9694b8","ssdeep":"1536:yWbjzXwlvEwbDey5wOl3vkiXo3pJR/wxQGlImvDshx:yW2vVbDeyCOl6J3GumvDs","tlshash":"55a3098579e531b682c73779a86f260eb2bb5c43581c8014da19ece06cb4f5da43ff98","first_seen":"2023-05-18T20:55:30Z","last_seen":"2026-08-23T17:06:25.338372Z","times_seen":1519,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/file/464001880/2/VGTLBN3QuYM.10959/8940838e7dddc787d8","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.org/js/tgsticker-worker.js?14","date":"2026-08-23T15:26:27.402Z","timestamp":1787498787402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /file/464001880/2/VGTLBN3QuYM.10959/8940838e7dddc787d8 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/js/tgsticker-worker.js?14\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 10958\r\ncache-control: max-age=2592000, public\r\nexpires: Fri, 11 Sep 2026 22:49:15 GMT\r\netag: \"5c58efa7837b68ba6221da9224af8d45435b55a1\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10959,"size_decoded":11342,"mime_type":"text/html; charset=UTF-8","magic":"data","md5":"ff7e11dfac94a04a530bde1952f9f555","sha1":"27b7510fef061196c3e14f9cad1b385cb42e73c2","sha256":"ee05dd6a035bc279c893bf87ac3242f2109e084f72aa243935406da83cac5ab6","sha512":"6278acb13b9961927b29f457a47d363a2a7a42553f4b97d13388fde7a8585d25c676f43b916bc4c4ae90fc28918012f3f9c201de0095a4bfd406872e33405795","ssdeep":"384:la8AaYuJK+oBcOm1+Pvn1qf1gwvmh+q8bq53fM:8L6K+FOX1qnmh+q8bq53U","tlshash":"c862af2b3111d3b5a1bfa8e62a2036e83409dfb7d687b549e0790054216aa1b939f632","first_seen":"2023-05-15T10:52:59Z","last_seen":"2026-08-23T15:27:01.727449Z","times_seen":752,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/file/464001897/3/f0Go0rLpEwk.11343.png/dd4eeb46cc5efc0688","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.719Z","timestamp":1787498786719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /file/464001897/3/f0Go0rLpEwk.11343.png/dd4eeb46cc5efc0688 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 11348\r\ncache-control: max-age=2592000, public\r\nexpires: Mon, 07 Sep 2026 12:29:07 GMT\r\netag: \"183936b397813281d8de1b217deb5c565bde1c5b\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11343,"size_decoded":11717,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"4e06d87c860ba8e8a804350f42632217","sha1":"31d3f89ae95d6f25660020b21e49114aaecfdd59","sha256":"6b081cb199e67a43ddcd7ddac0b528c93cc72bb82641937368a41b0aece43125","sha512":"c28516686e07c341dba58b28c8185ac31ff479d7b4f8d081cb50b395c6678e353b8d0d00e3b21185dbcb6484f81a354170d403b8b6f6e7efe8d73017d1d681ed","ssdeep":"192:5BkxH7mNBqw0b+7h5tyiS/5Z3LeiTLgrsPGLR66oy/PtnBpLghEr/RKlfPs9yMHk:5BGKrr0bkNyiqZ3LeiTLLm66NFBZgWru","tlshash":"fc32ceebb95170dc581b208b3f005099cc5df6500d2e2e9fb9fec78910238a9a580bab","first_seen":"2023-05-09T05:29:39Z","last_seen":"2026-08-23T15:27:01.72826Z","times_seen":1213,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/file/464001402/5/eOMSj3GzJXo.13579.png/f3cec6c451d023c109","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.726Z","timestamp":1787498786726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /file/464001402/5/eOMSj3GzJXo.13579.png/f3cec6c451d023c109 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 13592\r\ncache-control: max-age=2592000, public\r\nexpires: Mon, 07 Sep 2026 12:29:13 GMT\r\netag: \"67176c69aa11e9f08d30f489308dc74d85e92ef0\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13579,"size_decoded":13961,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"eb46ced34f8cd5637a3ca911bd12f300","sha1":"a26b44e6e634e4d670a38549033d3539a981e415","sha256":"df53d5b90c9e669236f8593b7fc941a6da753ee8eec79a64c6955a4a67dcb45f","sha512":"8e015b01a7bc62637caf4c7138d256105fc77b227e0108224917b55ae813d7b1b2381371e0ef0b76a27fa9a0d7d2b02a96b0981b7183e433d3fb07a029488c33","ssdeep":"384:YJIBYQNLDhKyY9tWkQqHAKSTSMk8IduPQDvrz:YJIKYlYnWk/VS5k8Su4Dv/","tlshash":"8152c0500866b246bf19f23b7f683c57c7e154880a47e6369421eed180e78c7fb2a32d","first_seen":"2023-05-09T05:29:39Z","last_seen":"2026-08-23T15:27:01.729033Z","times_seen":1150,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/tgsticker-worker.js?14","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:27.240Z","timestamp":1787498787240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/tgsticker-worker.js?14 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Jun 2022 21:52:44 GMT\r\netag: W/\"62bcc9ac-1731\"\r\nexpires: Thu, 27 Aug 2026 15:26:27 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5937,"size_decoded":2720,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a3eecfb5cd60979b65af8ef49bb66045","sha1":"d4c4eaab526e88c2eb58339a28207dba967be384","sha256":"b508251f81df8fda1990736e14135063e5421f6c424734c90b263d8bdfc944e9","sha512":"993c542fd86adac3c737dea3c19e2cf1a12dd128e69550e7db8933e3062e778668988ba496bf88b29e0d3dda303b5bb1f80aba11d6116a77653d30183f04ae54","ssdeep":"96:vYYD4PDKthWNRm/Qr7JTdAvAjDIRHO9slZe2gLaFB6ASqJlias7:vPMuhWNRmor7JT+vAjcRISSLa36ASqJ0","tlshash":"01c1974d6afa20165023b52ace6f19093639c01bb51ddf58b69c4bc41f92d3846faff8","first_seen":"2023-09-05T15:09:53Z","last_seen":"2026-08-23T17:06:25.333834Z","times_seen":852,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/SiteIconAndroid.svg","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.794Z","timestamp":1787498786794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/SiteIconAndroid.svg HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/css/telegram-theme.css?7\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 999\r\nlast-modified: Mon, 18 Apr 2022 20:19:52 GMT\r\netag: \"625dc7e8-3e7\"\r\nexpires: Thu, 27 Aug 2026 15:26:26 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":999,"size_decoded":1336,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4adc034f937b41471daaea71e64a727d","sha1":"6b5c52d2a35704410262b70296a14d6a4331929d","sha256":"3399887fac9f9b581a8c81860c56fca807c0ed6876307a12c54e0161aa4721db","sha512":"c6e865d3f4a6e33bd3e2f6fd0d157482c0d849820886e3d7761add57a4df4ab3fe8d2f51847b4808803668309bbb9d5818b68f1e847edc1eeeb3a7641249a302","ssdeep":"","tlshash":"371136e1c389c3597d07e425dd309486a24faad8f58f7454e5b3c325b2ca4caf95c129","first_seen":"2023-05-09T05:29:39Z","last_seen":"2026-08-23T15:27:01.729838Z","times_seen":963,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/file/464001828/11e99/2FUYW30UXAI.12708/7604effa1e02ddf7f9","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.org/js/tgsticker-worker.js?14","date":"2026-08-23T15:26:27.404Z","timestamp":1787498787404,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /file/464001828/11e99/2FUYW30UXAI.12708/7604effa1e02ddf7f9 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/js/tgsticker-worker.js?14\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 12699\r\ncache-control: max-age=2592000, public\r\nexpires: Fri, 11 Sep 2026 22:49:17 GMT\r\netag: \"5efa4caf73d09bf388e257a35d778134a66d2692\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12708,"size_decoded":13083,"mime_type":"text/html; charset=UTF-8","magic":"data","md5":"2b925bdf9d9771be39212e078be5b7fe","sha1":"91c7d63a861e9d1be9acaf52e23bef8cdb240885","sha256":"5565c6e45a20132e2d1e263ee2be585376c2c64dd39d9aa6552c37ecd36c7a46","sha512":"9a9f1080ecde855a8c9f71051699c1b5f67badb43b49f697dfc34b52251434aba3565d50ad8f247582ed95455f33e12a18ec74a5619bf6b49b8d70bce51c0f76","ssdeep":"384:EdiZ6x6rJgX0sPj/nkqoqU8VbYjZ9Nl6/CAc8PX:r6x6lW0yQqoiVba9j0CAc8PX","tlshash":"4482bf42b253f760879f54eaa00121e426478a52bf1f9691cf50d3c5379e53f3bae6d0","first_seen":"2023-05-15T10:53:56Z","last_seen":"2026-08-23T15:27:01.730633Z","times_seen":771,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/file/464001453/2/eW_MzRhUGoM.10926/fe1f3bc3dd08367c0a","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.org/js/tgsticker-worker.js?14","date":"2026-08-23T15:26:27.406Z","timestamp":1787498787406,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /file/464001453/2/eW_MzRhUGoM.10926/fe1f3bc3dd08367c0a HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/js/tgsticker-worker.js?14\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 10922\r\ncache-control: max-age=2592000, public\r\nexpires: Fri, 11 Sep 2026 22:49:18 GMT\r\netag: \"bfd4d42dd14ef70d0233bb51ae6d69b50d877b15\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10926,"size_decoded":11306,"mime_type":"text/html; charset=UTF-8","magic":"data","md5":"7d8c00d2a1242a45294a12ce588fb7b8","sha1":"d8c0a0bc27c4509021593222647216700cd1aeee","sha256":"c534befeb8ad7d4b05011d5b5082e389e4e7b16a7f577341e8a5402f3e574c40","sha512":"0c193e8617dcf856b18bb2182b68a8b1255beb37e381753d9b25c17cff757a9ac0aa376a4af3fdf2d7f618977d8b6961b815b4efae56d9fb6625440fcf95304d","ssdeep":"384:LhSxxfAqK1ATbktQUsKVWyLXxdz4l6KwZ7W:sx+ObkeAVWKxdi0Z7W","tlshash":"d462b02ef010d3e0c1f584fb5e020aa8738531f0db9ae516fe3495345a97b1c7abe946","first_seen":"2023-05-18T09:33:01Z","last_seen":"2026-08-23T15:27:01.73157Z","times_seen":754,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/css/bootstrap.min.css?3","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.702Z","timestamp":1787498786702,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /css/bootstrap.min.css?3 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Nov 2017 17:54:14 GMT\r\netag: W/\"5a05e7c6-a61b\"\r\nexpires: Thu, 27 Aug 2026 15:26:26 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42523,"size_decoded":10491,"mime_type":"text/css","magic":"ASCII text, with very long lines (42164)","md5":"c2656e265ef58a9cc9f4b70b15da5fb9","sha1":"85c5ebdb89d4574d72688c2650d4b84b9b09770a","sha256":"f1d083ffaa644c708f11db29707aa57c19246e6d32643b03fee3f82c17b224b3","sha512":"6417aadebeef4ee35381bfc7034148d57fd061d84de9974d798468c6426c24a6bd1c9913cf517accf3e349fa06cbdd546d2883ea8391c595285fe0c6127e26e8","ssdeep":"384:6RvBBVkrJxvcwYBUQ7X85AUfvDUNeFUBOgBmjeYP4PSvSdlb1bGjpXJNNRyIrOM:2k0p38OBmjeYP4xb1bG/bRyIH","tlshash":"6313c811f36031aa2167c61c65d4aad63f256120da8e0fbbf93376e88b8d6c91373f05","first_seen":"2023-04-07T00:00:47Z","last_seen":"2026-08-23T17:06:25.313418Z","times_seen":68268,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/main-theme.js?6","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.711Z","timestamp":1787498786711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/main-theme.js?6 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 30 Jun 2026 13:38:12 GMT\r\netag: W/\"6a43c6c4-4ce0\"\r\nexpires: Thu, 27 Aug 2026 15:26:26 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19680,"size_decoded":8084,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"97ba453c5c8f1e21f944d3432a251758","sha1":"3cf5c76e86172e16e851afae89f263a4b1910a6a","sha256":"0cf24b6eaaf0cf09dbc85e1d199f5f83f56814ffb15ca9b9df0201cec689f8b0","sha512":"c54eac5ea12ef7c61136e2f049213826a82344a10aa34a3877270f56814de1bc600a4209249dcbe98eea2729433da5b0f6867d78b951271698923e956336656c","ssdeep":"384:PaNvbqVQF3PQi8YkHuc+/jF0SrL9JDKDLLssxu1+5O7:PFVQF4jYjc+BP9JDK3LsO47","tlshash":"e292c6596ea32177a423317dc75fa159f23a84136246c640bc1ce2482fa097793bdfec","first_seen":"2026-06-30T23:11:31.673153Z","last_seen":"2026-08-23T17:06:25.314684Z","times_seen":34,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/file/464001880/3/xOpm7ohoHQ0.12690.png/feb1e161b1d3608613","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.724Z","timestamp":1787498786724,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /file/464001880/3/xOpm7ohoHQ0.12690.png/feb1e161b1d3608613 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 12713\r\ncache-control: max-age=2592000, public\r\nexpires: Mon, 07 Sep 2026 12:29:13 GMT\r\netag: \"9b666309f437dfb32688ee016a9904703de41927\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12690,"size_decoded":13082,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"9c2a194ee50807ae9342b60634be2445","sha1":"553dfd2ba2a5e11468a3b57aba897995f2f4d676","sha256":"ec1788bcdd05595bbcd16e5c7c13bce6481b620ebbc4200b2e6598c02c82aa78","sha512":"27018db71b0a93e3e68e42e0f9dc8528f7c807571c5ed1c1330bb5fac68a1685869bf04043167f885ea413ae6b0ed029cdedce64b1354c0df367603ed0baa67a","ssdeep":"192:qU6SieKSVdeYciqBy/VHaqqtsNEQ8bwRP46NLvDMm5GebYlttyr:qz9e7e3iq+HlHs0qaRkJAr","tlshash":"2542c0d3fc6099d75e4a01e3096faa651879203c2fc0da3f66115967f1dcc3ea7218ca","first_seen":"2023-05-09T05:29:39Z","last_seen":"2026-08-23T15:27:01.735919Z","times_seen":1216,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/file/400780400535/2/fkUcVRnSU-M.140100.webp/10c066db41f83e6d5e","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.718Z","timestamp":1787498786718,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /file/400780400535/2/fkUcVRnSU-M.140100.webp/10c066db41f83e6d5e HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 140143\r\ncache-control: max-age=2592000, public\r\nexpires: Tue, 25 Aug 2026 17:26:25 GMT\r\netag: \"d4ba380951e551143d567b486fa3ca3cf97b6229\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140100,"size_decoded":140514,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a8ed9dffe81d964e5b79ed39b49e063","sha1":"eedcd08282deec48ef9a4c472122bd6ef61ab02d","sha256":"3ff92eba0d1b2711ac2f956f2855ab3e602bfa027a04da839121d187cbd35cd3","sha512":"2858c27bae39fb5c3332cae42b447e9b01fad7a2781f85606e1bf6d673d0a7d3e3831f6550de45f6e63307a2c764a26c74bc87d94400720fa1f49df3c765dee4","ssdeep":"3072:PpPd8fvZNdTiCiVDWPQc7sTGdTPbGtd6jXzCJA1LaYrm7P:BP0NNiCiouqNPbuQjC21L5m7","tlshash":"99d323dcdd7fced3032b056b34f64f21fd056b0a8fe456aa2a22e9182e0b345456891f","first_seen":"2026-06-30T13:29:12.382703Z","last_seen":"2026-08-23T17:06:25.354238Z","times_seen":27,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/SiteiOS.webp","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.798Z","timestamp":1787498786798,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/SiteiOS.webp HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/css/telegram.css?254\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11304\r\nlast-modified: Fri, 26 Jun 2026 17:23:16 GMT\r\netag: \"6a3eb584-2c28\"\r\nexpires: Thu, 27 Aug 2026 15:26:26 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11304,"size_decoded":11641,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"050b2e3c99433566579161248dea3ebf","sha1":"1f4c161663466d7aa31d852c1e6b339d1bf13688","sha256":"7e5081beed1a71dc6e648804335d88e37dcfd7e086c1d9c497a521f0ff9acb48","sha512":"9d80e6a40e90e923accbb61903726b93ad48c18f15e7c8b95d305fe08546eafb7301abed7e8305c26dfbdba352de0f53698ec6e5a01006090502f5136522679f","ssdeep":"192:jO8CVrtaQZ9mX2ripacS9VFZ1LCBO0IRpcGC/uGY48E9yA37PCAhG/o:RgBZ9mGrwKL0IRpPC/1Y/Ih0o","tlshash":"0e32bfbc5a139e416a1f197c0edebb890c070748fa97cdf9e811e462186690f7277e06","first_seen":"2026-06-30T13:29:12.376881Z","last_seen":"2026-08-23T15:27:01.737579Z","times_seen":24,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/rlottie-wasm.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.org/js/tgsticker-worker.js?14","date":"2026-08-23T15:26:27.044Z","timestamp":1787498787044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/rlottie-wasm.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/js/tgsticker-worker.js?14\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Jul 2020 22:03:36 GMT\r\netag: W/\"5f0e2bb8-188f9\"\r\nexpires: Thu, 27 Aug 2026 15:26:27 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":100601,"size_decoded":31689,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9b31c5083355b2aaaaaec512f3a0021d","sha1":"395c9925e89a0ae66f0e016ae664c0aabfd64865","sha256":"59df8caec8e28f1dd238c2f59fdb02854b51da69b0bc1a18271c502a9a166295","sha512":"2b1c65386a00fe87d1b74d319dbd9f421a5873e5c1b32e0fec801a03444acce9c35d2f4ac3c6def701c885347f750408de8e948abc28dbe306c76c088e9694b8","ssdeep":"1536:yWbjzXwlvEwbDey5wOl3vkiXo3pJR/wxQGlImvDshx:yW2vVbDeyCOl6J3GumvDs","tlshash":"55a3098579e531b682c73779a86f260eb2bb5c43581c8014da19ece06cb4f5da43ff98","first_seen":"2023-05-18T20:55:30Z","last_seen":"2026-08-23T17:06:25.338372Z","times_seen":1519,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/file/464001418/1/fabnJFzygPY.17422/bc9dec9fd8bd26e00e","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.org/js/tgsticker-worker.js?14","date":"2026-08-23T15:26:27.397Z","timestamp":1787498787397,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /file/464001418/1/fabnJFzygPY.17422/bc9dec9fd8bd26e00e HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/js/tgsticker-worker.js?14\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 17435\r\ncache-control: max-age=2592000, public\r\nexpires: Fri, 11 Sep 2026 22:49:15 GMT\r\netag: \"8c3dca30247141a56bd9786fc869d92e887e1bdd\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17422,"size_decoded":17819,"mime_type":"text/html; charset=UTF-8","magic":"data","md5":"a704cf1cbf15ecdf5c0cbfa12c378c35","sha1":"93fb27247e0c2b0bf2b743c50546f30064da8d59","sha256":"385bf7738f21e33acf771059523b2e932632d470059c412ede657ab5475c46a5","sha512":"6895030c5f755fb7562c6d187b02c5872a9732cff6525b0b85f566e8d3ca75eb7c1b7ff5fd549f4986ae71f5b89bbd69aa961f90b078bc06515f23e5078a9764","ssdeep":"384:hgt8w1K41Wkf7GzHSwPN6jbmHO7UicAUoRXOKsad9C7HzW9TAsrrtUozZ757RWEx:888n0SwV6X4O7BFOKsajC7TWGs/Xl7Qk","tlshash":"93b2c0162291e369e09674f63c0ac6f89054edc4a2d7abd2c6ac60b45e5f73e75cfc04","first_seen":"2023-05-15T10:52:59Z","last_seen":"2026-08-23T15:27:01.738342Z","times_seen":803,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/file/464001493/2/hV6uPcaHk_E.17388/dcccb066a7b4fe44ee","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.org/js/tgsticker-worker.js?14","date":"2026-08-23T15:26:27.400Z","timestamp":1787498787400,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /file/464001493/2/hV6uPcaHk_E.17388/dcccb066a7b4fe44ee HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/js/tgsticker-worker.js?14\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 17333\r\ncache-control: max-age=2592000, public\r\nexpires: Fri, 11 Sep 2026 22:49:15 GMT\r\netag: \"a10271ce8b0db840e55148a1a269601ebdc195ff\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17388,"size_decoded":17717,"mime_type":"text/html; charset=UTF-8","magic":"data","md5":"9bba487827d44a5e1dddae363b076ec3","sha1":"54d60a7451c95255669419fca423a32b648f304e","sha256":"59da70d661b339233c215878af03e9257353024e72bbd16f7848aaf7525af293","sha512":"889c22422a11f56af393077fd692d17e30ced146f2f30ed2b08bfbfc60f54717ab6ee1029478669c01229039028d3a2a2fb7a7d58f24e2afa6c023fe4f518f94","ssdeep":"768:sme0wR6YXy/0AQjGcuajzIc3X+7E6QDxQ1MeF03:sme0wRt40AKGMPdu7EvDOu003","tlshash":"30b2d0014445e761d2ef61e62d4649c832285f1ea19bfeedc094e1a28c1e83a73edcf3","first_seen":"2023-06-13T13:06:35Z","last_seen":"2026-08-23T15:27:01.73921Z","times_seen":786,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/SiteDesktop.webp","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.799Z","timestamp":1787498786799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/SiteDesktop.webp HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/css/telegram.css?254\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14502\r\nlast-modified: Fri, 26 Jun 2026 17:23:16 GMT\r\netag: \"6a3eb584-38a6\"\r\nexpires: Thu, 27 Aug 2026 15:26:26 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14502,"size_decoded":14839,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebe37c878d747e41543bea6ecfa3ed74","sha1":"d0f11beac0463c57d55d597949e6b2c22146e603","sha256":"d84765a20e15a9a6aec39c720fceb69585cbcccf6c69280bbcc706de77185314","sha512":"ccd70be68b893104f0ab68727d355525b5f430f4be106f26334d70a3ee313de875a60d3a07312314a103418c53f06d4f692529e76be33082f01865641d718e38","ssdeep":"384:HScKVMSKJeQCJfh0/No2+W2/mvbHiDCOqwpLT:HScBSkeQCdh2NbI+HiGOqwB","tlshash":"8252c029e9a843f0f361e03a48c2c445c31c7ddc1ac66978766c6aeec652789734d4f9","first_seen":"2026-06-30T13:29:12.395752Z","last_seen":"2026-08-23T15:27:01.740054Z","times_seen":22,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/main.js?49","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.708Z","timestamp":1787498786708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/main.js?49 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 26 Jun 2026 17:23:16 GMT\r\netag: W/\"6a3eb584-55c0\"\r\nexpires: Thu, 27 Aug 2026 15:26:26 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21952,"size_decoded":7392,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"71abaf0fcc7b40032417676f384a1e35","sha1":"b532872ea6b756507ff7ee07f354904e92c1bd39","sha256":"cd76e186bca4baa7b41d94c367295cb219ead4886d67c3ef0d7d51ddc38881c4","sha512":"bee517da7d4fd73492aae2a60d42bb2ad9eab26de33def7499b8ee43ee41dbcdffb58fe098e17428c8b645a7f30508ead72231f45b3b443adc77354c94aee860","ssdeep":"384:FCxaBo7s5dibe4UX4BXnasovLi1xPSoGBejIfD5FOhPOwIc:FCxko7U/Li1xdGFTeIc","tlshash":"eaa2616879f33036586b72796baf9249377400475009df007c2eda986fa1e3626fafd4","first_seen":"2026-06-30T13:29:12.404938Z","last_seen":"2026-08-23T17:06:25.337806Z","times_seen":35,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/tgsticker-worker.js?14","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:27.250Z","timestamp":1787498787250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/tgsticker-worker.js?14 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Jun 2022 21:52:44 GMT\r\netag: W/\"62bcc9ac-1731\"\r\nexpires: Thu, 27 Aug 2026 15:26:27 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5937,"size_decoded":2720,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a3eecfb5cd60979b65af8ef49bb66045","sha1":"d4c4eaab526e88c2eb58339a28207dba967be384","sha256":"b508251f81df8fda1990736e14135063e5421f6c424734c90b263d8bdfc944e9","sha512":"993c542fd86adac3c737dea3c19e2cf1a12dd128e69550e7db8933e3062e778668988ba496bf88b29e0d3dda303b5bb1f80aba11d6116a77653d30183f04ae54","ssdeep":"96:vYYD4PDKthWNRm/Qr7JTdAvAjDIRHO9slZe2gLaFB6ASqJlias7:vPMuhWNRmor7JT+vAjcRISSLa36ASqJ0","tlshash":"01c1974d6afa20165023b52ace6f19093639c01bb51ddf58b69c4bc41f92d3846faff8","first_seen":"2023-09-05T15:09:53Z","last_seen":"2026-08-23T17:06:25.333834Z","times_seen":852,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account-verify.cyou/","fqdn":"account-verify.cyou","domain":"account-verify.cyou","tld":"cyou"},"ip":{"addr":"193.84.3.214","port":443,"asn":57043,"as":"Hostkey B.v.","country":"Finland","country_code":"FI"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-23T15:26:26.142Z","timestamp":1787498786142,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"account-verify.cyou","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 13:57:16 GMT","end":"Thu, 19 Nov 2026 13:57:15 GMT"},"fingerprint":{"sha1":"5F:52:56:2C:69:00:A0:8D:33:34:30:9E:B6:E5:97:D7:A8:BC:4A:6C","sha256":"3A:9F:9D:57:E3:0E:30:84:3E:5D:9C:59:12:15:26:BC:46:89:A0:3C:CB:A7:82:04:90:EB:B1:A6:3D:20:B9:10"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: account-verify.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\nlocation: https://telegram.org\r\nvary: Accept\r\nx-powered-by: Express\r\ncontent-length: 49\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T17:39:47.630109Z","times_seen":18058935,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":0,"dns":141,"connect":14,"send":0,"wait":15,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"account-verify.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/css/telegram-theme.css?7","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.705Z","timestamp":1787498786705,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /css/telegram-theme.css?7 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 11 Jul 2026 11:37:59 GMT\r\netag: W/\"6a522b17-801b\"\r\nexpires: Thu, 27 Aug 2026 15:26:26 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32795,"size_decoded":8200,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1265)","md5":"2bb462697bfca71ce51bed2dd37500a5","sha1":"28c664298295ce99fa6970b58b8065fcbe69038e","sha256":"5bf4ff0f5cf03e05e187eff191dd0d5df35cfa265e3d0f976f0e3a29161568d7","sha512":"835ead93fe6bff714ffff30980f4f32959fe8a5b1ea8829b74b6dd68e3c4ed198c03308bb21686f107f7f2d6113f17d9b1838d2c7ff12757b4325fe817613343","ssdeep":"384:8UjPwjPmF+SAmmPX2mOPFujmGtGKMUGQxr2o4U+GUlvRXPReP1FTDp/b:8gUmnAmmPX2mOPFujmGztoGUZRXI1FXh","tlshash":"58e232b5bebcc61424178e0c3987ed9c3b9ff286e6445b68fb6d30646ac03e89541b4d","first_seen":"2026-07-12T04:48:30.33048Z","last_seen":"2026-08-23T17:06:25.337226Z","times_seen":20,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/file/464001132/3/-1qvqKPZsQQ.17975.png/7d57d7159cf4fbe9b2","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.722Z","timestamp":1787498786722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /file/464001132/3/-1qvqKPZsQQ.17975.png/7d57d7159cf4fbe9b2 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 17998\r\ncache-control: max-age=2592000, public\r\nexpires: Mon, 07 Sep 2026 12:29:13 GMT\r\netag: \"fa9a38332023332be262ffbb44b3d98e6ed68a45\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17975,"size_decoded":18367,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"1d581b72d19bc828654229a0773a5300","sha1":"ff517c8bb4b37351ff3dd72f7ec66fc584e90d5c","sha256":"d2b3858e94ed122782de9028f668334438649e46e5d2c6d761e3359c8e3de200","sha512":"1b98b05c5f720c34d470af9606013e8dfef2c88225ab39dde906e4bec48f84851bfa9c68bd99aebafefac35c8f99861a58a40deb5c26cb74a5a19374fe7aedef","ssdeep":"384:/QJwEzZkYmHWlAk99RDXjovjCKGzsawRB8icBLu5+r0lKOqke:I1V9mIAedXUvjCKGzHwNx5Vlc","tlshash":"8b82e0fa8aad835fa9b82500f17219d07d8277389cdc7d6dc07818e0bb245963b1f712","first_seen":"2023-05-09T05:29:39Z","last_seen":"2026-08-23T15:27:01.743722Z","times_seen":1207,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/SiteAndroid.webp","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.796Z","timestamp":1787498786796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/SiteAndroid.webp HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/css/telegram.css?254\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8014\r\nlast-modified: Fri, 26 Jun 2026 17:23:16 GMT\r\netag: \"6a3eb584-1f4e\"\r\nexpires: Thu, 27 Aug 2026 15:26:26 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8014,"size_decoded":8350,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0b8562918ce1dce4b982467da5a4d19a","sha1":"35794acf8324d1f6dc389b139530fc01b40afeb4","sha256":"9e44d641a035cbf97ab59b60983c19103847d456a417dbf5a831fee71ec4cc6a","sha512":"a39fb79f56fa12dc953fb65acba853192d5d320908c898226afd74044c2898c6d8bc87cd7c52a8cf359f17cbbee40ebf76ba5bf816a3a399f0b5e45aa7a884ac","ssdeep":"192:zOhz0B2C75b/wFZMexSVRHCTgRrCZNwiciggMW5eSaa:y6B2C5/wFWYSVqgRrCkicldfa","tlshash":"3bf19e1784fff1cf5eb56a0518e2a78a363ff16ac017d1679cb09b59cc6142e06c4408","first_seen":"2026-06-30T13:29:12.401708Z","last_seen":"2026-08-23T15:27:01.744444Z","times_seen":24,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/t_main_iOS_demo.mp4","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.886Z","timestamp":1787498786886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/t_main_iOS_demo.mp4 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 244748\r\nlast-modified: Sat, 09 May 2020 18:58:54 GMT\r\netag: \"5eb6fd6e-3bc0c\"\r\nexpires: Thu, 27 Aug 2026 15:26:26 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-range: bytes 0-244747/244748\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":244748,"size_decoded":245102,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"91daa37e09df8b688f7832e7d6d80aa6","sha1":"fc59e29275e98dd5dce1efc9b982ec1ba5ad4276","sha256":"eaf99fdddbab6953d53df2a7e81b5275e90e221e0a7ebd3d99f42cf4b6aba6d2","sha512":"96944b45cdaecbb55cf9869004d3644daffc9198b9a7033f581b0c2be769aca586944f9be48c68278df9f0159eb0b248d1a4c5122283e392827ff7d8304e2378","ssdeep":"6144:0j5FgtXKqm3eK60anWDVUK0u4a45U00kYUUe2F1IU77a:wyBKqSe6anW2K0Na45ULjUUeuL7G","tlshash":"423412a69ddd2b00cacfc2354ea81fbb015137692709a193f09c4ec53de897b236ed65","first_seen":"2023-05-15T10:52:59Z","last_seen":"2026-08-23T15:27:01.745394Z","times_seen":1129,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/file/464001560/2/n7EACfx4FPY.16465.png/7318c11715aa2ec45b","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.721Z","timestamp":1787498786721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /file/464001560/2/n7EACfx4FPY.16465.png/7318c11715aa2ec45b HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 16488\r\ncache-control: max-age=2592000, public\r\nexpires: Mon, 07 Sep 2026 12:29:13 GMT\r\netag: \"ad24af7a174e71673b28f7e827a85934048a9cd7\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16465,"size_decoded":16857,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"77ffe8b3dff795ea0734bf4b35a94357","sha1":"2d545ffb0877993dd227d528638a336cd3b9e32c","sha256":"ad37907e335e7c5d2692b682401f4520753ab539fadedf74962c6a004b3a179f","sha512":"fb4692716badcb1fce73addb8ecbd16c7158a8d0618b3bf3b1833661a3813d48500f8c96972c9cbc2f5ee9dbec1ce6f0450a6445a3ca9635fe2b3ada9a50b206","ssdeep":"384:4/zugvMc/z6Gaq5iFvJBOqikYcWOFKOX7AtgqHJVw:4qW6UgvJHikXW27X7kJm","tlshash":"5f72d07623938eb70eb9680d3f58eba84f17c540be5897a43176950c1532fe5ac4893e","first_seen":"2023-05-09T05:29:39Z","last_seen":"2026-08-23T15:27:01.746202Z","times_seen":1205,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/file/464001453/3/mNzXWC3RX0c.15740.png/9ce5fa5f3fb74460b4","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.725Z","timestamp":1787498786725,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /file/464001453/3/mNzXWC3RX0c.15740.png/9ce5fa5f3fb74460b4 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 15763\r\ncache-control: max-age=2592000, public\r\nexpires: Mon, 07 Sep 2026 12:29:13 GMT\r\netag: \"9663b372030cf4b80b2b7ab98f8e689847388957\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15740,"size_decoded":16132,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"4e59e61b2a0205e09dafad24da174530","sha1":"0dc2adba2fbe4f1cd195364ef4f1ab4dc1641993","sha256":"269f20eb63db3ece8035886ebc69112ef94339da867d47f815237800555e508a","sha512":"8ee876a60c4d511beb1229678e34d5f91c34dd8eda4cf792dc521db76cb8338480b3c265181b3afb7446d3992e243d590a09494cb8e10fc4268022181babda28","ssdeep":"384:AwIpVA9llRR/+5BrSOxNbCGcIvTeSEHIGbi24fe:8Vul+5BrPtIIvTeSEHRiV2","tlshash":"e562d0c5d117242430b822b7c7fb936136e6b90fa3b1354b907a994112c74bec3deab5","first_seen":"2023-05-09T05:29:39Z","last_seen":"2026-08-23T15:27:01.747043Z","times_seen":1150,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/file/464001166/2/FzTl8_M5mQA.19325.png/b6c5dbc0e4f6553805","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.727Z","timestamp":1787498786727,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /file/464001166/2/FzTl8_M5mQA.19325.png/b6c5dbc0e4f6553805 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 19348\r\ncache-control: max-age=2592000, public\r\nexpires: Mon, 07 Sep 2026 12:29:13 GMT\r\netag: \"2690d1e344526d5a2fb08060299f2697537643ae\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19325,"size_decoded":19717,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"da1ff638a4141eed84327e20f936496f","sha1":"91e5410531539b53c3aefcc5774413e8a665a57a","sha256":"b66de388c12d6611870503c34c5db37fe079313c4292177435fd8dc7ed6cbe67","sha512":"75b6243feb853275a9e4aa1c36591cbdc3439cd27489cd5833f8670e072acecc59888699bebd3ffe5f8d1851608394d3255eaaa863db438511cb4798f99d334a","ssdeep":"384:/fkqoRm5m06jc+ejLD9xyVF1gX+Bq3lCTiqvfKs90HmFOGJaIv5Se4:/cqo25lu1RBJmYtiH8OERvK","tlshash":"3e92e1724b62b388ea599ce2524f72724cb9f52f5830afca12f5c544c1cf9ee402e56c","first_seen":"2023-05-09T05:29:39Z","last_seen":"2026-08-23T15:27:01.74791Z","times_seen":1103,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/pako-inflate.min.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.org/js/tgsticker-worker.js?14","date":"2026-08-23T15:26:27.098Z","timestamp":1787498787098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/pako-inflate.min.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/js/tgsticker-worker.js?14\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 04 Oct 2019 11:37:17 GMT\r\netag: W/\"5d972eed-589a\"\r\nexpires: Thu, 27 Aug 2026 15:26:27 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22682,"size_decoded":9048,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22681)","md5":"8e548b1ad991b0cd636a7e4939e3c420","sha1":"ffacc63c9b5d77b0597f9c054ca349312626a5fe","sha256":"2ca27e9a8dae569cdeac42752ed1aed1afeff7f19282d3cc12c0aaa54a08bc04","sha512":"5eae750bdf8c8d073a9930518d7a5406e2335946f124da9af0acf1a9c35ed2171c5bf7511bdf647a7037ff3557d83ec6e2fe7dcfc9c30f18c13d34c051335158","ssdeep":"384:1nx7is2gm0cNqoi+Ho9Jzb1g06AcnsQGb5:ZngP09Jzq06ASsX1","tlshash":"45a2098f21b4555552e695f800ef39c760b988332d084c7a5634def0a1b58cfe26ecbb","first_seen":"2023-05-15T10:52:59Z","last_seen":"2026-08-23T17:06:25.305334Z","times_seen":1501,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/tgsticker-worker.js?14","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:27.230Z","timestamp":1787498787230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/tgsticker-worker.js?14 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Jun 2022 21:52:44 GMT\r\netag: W/\"62bcc9ac-1731\"\r\nexpires: Thu, 27 Aug 2026 15:26:27 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5937,"size_decoded":2720,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"a3eecfb5cd60979b65af8ef49bb66045","sha1":"d4c4eaab526e88c2eb58339a28207dba967be384","sha256":"b508251f81df8fda1990736e14135063e5421f6c424734c90b263d8bdfc944e9","sha512":"993c542fd86adac3c737dea3c19e2cf1a12dd128e69550e7db8933e3062e778668988ba496bf88b29e0d3dda303b5bb1f80aba11d6116a77653d30183f04ae54","ssdeep":"96:vYYD4PDKthWNRm/Qr7JTdAvAjDIRHO9slZe2gLaFB6ASqJlias7:vPMuhWNRmor7JT+vAjcRISSLa36ASqJ0","tlshash":"01c1974d6afa20165023b52ace6f19093639c01bb51ddf58b69c4bc41f92d3846faff8","first_seen":"2023-09-05T15:09:53Z","last_seen":"2026-08-23T17:06:25.333834Z","times_seen":852,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/file/464001560/1/zLlKYgeDLoA.14496/62085b07461f2d87e4","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.org/js/tgsticker-worker.js?14","date":"2026-08-23T15:26:27.399Z","timestamp":1787498787399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /file/464001560/1/zLlKYgeDLoA.14496/62085b07461f2d87e4 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/js/tgsticker-worker.js?14\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 14467\r\ncache-control: max-age=2592000, public\r\nexpires: Fri, 11 Sep 2026 22:49:18 GMT\r\netag: \"bf069c5896b831434feb0a676d5c8a00925c46e2\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14496,"size_decoded":14851,"mime_type":"text/html; charset=UTF-8","magic":"data","md5":"50793508d686b6854ac38000a589a684","sha1":"742bb61fbb1320a839a88f89b148f7adf7099961","sha256":"d89665cf5ad6043ce4c1229e39bc84a26dcac2229fee3deaa32fb0658926dc66","sha512":"455827a10c6424ff91dc2ca8717ec53f2cfe2d06c949e615a22447cdfb453e0b1c6343e99af647f5b13374ae2d2f833d64ba1a9437bc09b08b8438839b6050ae","ssdeep":"384:tkdhTex4M3at29KlsmkMVUSE4vNz+h+S8nhtOj9bX4gGul/4qKoI+hN9kbHs88v:t2e2MRbMyFUz+h+PjOj5yulUahNOId","tlshash":"a192c0041301e350515d75f3bcc669a4eb04a0242b7bff86d23d82a1fdd923ab6dec62","first_seen":"2023-06-13T13:06:35Z","last_seen":"2026-08-23T15:27:01.748726Z","times_seen":813,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/file/464001828/11e9a/1yY7a721t4o.30567.png/e113973dae2bee508b","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.723Z","timestamp":1787498786723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /file/464001828/11e9a/1yY7a721t4o.30567.png/e113973dae2bee508b HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 30184\r\ncache-control: max-age=2592000, public\r\nexpires: Mon, 07 Sep 2026 12:29:13 GMT\r\netag: \"a30234722b2883f211eb0bad5c73c2ef2fe73a53\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30567,"size_decoded":30553,"mime_type":"image/png","magic":"PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced","md5":"0c6c45ee2597151fa5e955d11d2d38fe","sha1":"771aa6bbe2765cd2d6f754e14d5e12ffc476e939","sha256":"889ddfb8550bac935b0a02e52bef9d0950f0734d7a70661a0930a3d8e6a2f372","sha512":"bb4808e6b52f06991e9fbeb6e6e0d64b0afb4e87076a9cad8543494605cd2d0dc2f1d0007bf8c588c5e7682a87ea63f83bcc6f9c847dd60b3e3024cb39bbbd85","ssdeep":"768:pYweyGgLyxCaJ1leoVAqIuOlHPUfFbqqxViqR58IWE1:pX2eaLzOlvEAqxhR1","tlshash":"54d2e187ea13e50d3e4d83956dffb092007a172e49ee2dfb8871719217c6369413d9e4","first_seen":"2023-05-15T10:52:59Z","last_seen":"2026-08-23T15:27:01.749553Z","times_seen":922,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/t_logo_sprite.svg","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.883Z","timestamp":1787498786883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/t_logo_sprite.svg HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 19 Apr 2022 11:15:29 GMT\r\netag: W/\"625e99d1-5a4c\"\r\nexpires: Thu, 27 Aug 2026 15:26:26 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23116,"size_decoded":8034,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e75f7f8ac71782dda40464528a4f619b","sha1":"1294a00a625b50ff7c3eb3119a71d49399c9ac29","sha256":"832fbefd7a4fe8f651058597d9f1910883d1cbd56d0ceb343e7d6170aeecf982","sha512":"af128e227ed56355357fa0d3d46c9701e3b10f076f3515d84907ace6bbf282177a74ef577a0ac48e4e4cc1fe0dfe3d14368f7db08797aacc767e8841032c4e31","ssdeep":"384:wWjhl+ZZx0roaRvQgeMr2VxtaA93S/JKhV3PXASow7/XP5oP5VP5uP5sP5H6NC7E:wQhl2cfvrSxtaCDPaw756TUGLfY","tlshash":"e5a2b9a2f6b6f3f5e84ac3e9cd74a9b5790b20fdf606871883718680b555ec6850c878","first_seen":"2023-05-06T05:42:29Z","last_seen":"2026-08-23T15:27:01.750407Z","times_seen":2030,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/apple-touch-icon.png","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.org/","date":"2026-08-23T15:26:26.925Z","timestamp":1787498786925,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/apple-touch-icon.png HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 5644\r\nlast-modified: Thu, 21 Apr 2022 13:47:47 GMT\r\netag: \"62616083-160c\"\r\nexpires: Thu, 27 Aug 2026 15:26:26 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5644,"size_decoded":5979,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"295ccdb03006b8dfef45090dafbd46ac","sha1":"491ab660270e47cbac6a5731c51cca71c1c1b2b1","sha256":"a51d667d4262047c23e3a2a8aac3b46dc8a58c686cc013f2354011c07bf22cf3","sha512":"90bf3871af6d20372e1b7daa177afccaa16d30970873c2a1363d05fc49eca24b18e406835da051d79887e0e223aae345fd797cfa479f324f776e28b461b17bcd","ssdeep":"96:ZKgGepqI/QddfO0T+kST5610/DXhkyFBKNpu7UhDjuTu+uCCar+0xWl/rB61LVWR:yesBf+DNPVFANc7UhDku5G+0xWl/t6OR","tlshash":"28c19eb8f6ed2e5bc5f28693eb472665b2972a208534c06053f1ea1bd7b2121b4c6342","first_seen":"2023-05-02T07:47:09Z","last_seen":"2026-08-23T17:06:25.311614Z","times_seen":68663,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/rlottie-wasm.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.org/js/tgsticker-worker.js?14","date":"2026-08-23T15:26:27.269Z","timestamp":1787498787269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/rlottie-wasm.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/js/tgsticker-worker.js?14\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Jul 2020 22:03:36 GMT\r\netag: W/\"5f0e2bb8-188f9\"\r\nexpires: Thu, 27 Aug 2026 15:26:27 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100601,"size_decoded":31689,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9b31c5083355b2aaaaaec512f3a0021d","sha1":"395c9925e89a0ae66f0e016ae664c0aabfd64865","sha256":"59df8caec8e28f1dd238c2f59fdb02854b51da69b0bc1a18271c502a9a166295","sha512":"2b1c65386a00fe87d1b74d319dbd9f421a5873e5c1b32e0fec801a03444acce9c35d2f4ac3c6def701c885347f750408de8e948abc28dbe306c76c088e9694b8","ssdeep":"1536:yWbjzXwlvEwbDey5wOl3vkiXo3pJR/wxQGlImvDshx:yW2vVbDeyCOl6J3GumvDs","tlshash":"55a3098579e531b682c73779a86f260eb2bb5c43581c8014da19ece06cb4f5da43ff98","first_seen":"2023-05-18T20:55:30Z","last_seen":"2026-08-23T17:06:25.338372Z","times_seen":1519,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/pako-inflate.min.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.org/js/tgsticker-worker.js?14","date":"2026-08-23T15:26:27.315Z","timestamp":1787498787315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/pako-inflate.min.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/js/tgsticker-worker.js?14\r\nCookie: stel_ssid=81ed28452c6646df15_14859391319655795859\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 04 Oct 2019 11:37:17 GMT\r\netag: W/\"5d972eed-589a\"\r\nexpires: Thu, 27 Aug 2026 15:26:27 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22682,"size_decoded":9048,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22681)","md5":"8e548b1ad991b0cd636a7e4939e3c420","sha1":"ffacc63c9b5d77b0597f9c054ca349312626a5fe","sha256":"2ca27e9a8dae569cdeac42752ed1aed1afeff7f19282d3cc12c0aaa54a08bc04","sha512":"5eae750bdf8c8d073a9930518d7a5406e2335946f124da9af0acf1a9c35ed2171c5bf7511bdf647a7037ff3557d83ec6e2fe7dcfc9c30f18c13d34c051335158","ssdeep":"384:1nx7is2gm0cNqoi+Ho9Jzb1g06AcnsQGb5:ZngP09Jzq06ASsX1","tlshash":"45a2098f21b4555552e695f800ef39c760b988332d084c7a5634def0a1b58cfe26ecbb","first_seen":"2023-05-15T10:52:59Z","last_seen":"2026-08-23T17:06:25.305334Z","times_seen":1501,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}