{"report_id":"29bb2a32-8643-48a1-8169-c61d5323f3d2","version":6,"status":"done","tags":[],"date":"2026-04-21T04:31:51Z","url":{"schema":"https","addr":"forzaservice.net/","fqdn":"forzaservice.net","domain":"forzaservice.net","tld":"net"},"ip":{"addr":"172.67.187.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"forzaservice.net/","fqdn":"forzaservice.net","domain":"forzaservice.net","tld":"net"},"title":"Telegram Login Proxy","dom":{"size":1410,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"2abb36422da1d946b2211370b06e3508","sha1":"25c19cce50f00826954f3e71922ae806271b4d89","sha256":"8ad0540720c252f1125b523fcb3c22fad77313d76227dd4350da5d7e91c8b63b","sha512":"f0d62026f34e6dcbeb53426ae7295022da8c5ebf233e8671ff35a55032a100144bbfd238e3782a70a6591360f9ae4d38af351624a9faab13ef79b1e2b1dd1bf1","ssdeep":"","tlshash":"5521f1d356f89419b341419258d1b209add9e08fd808ed46bdd830aecfd5ec6886742e","dom_hash":"domhash800545406dc486dbf96929f8c64397fc","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"forzaservice.net/","fqdn":"forzaservice.net","domain":"forzaservice.net","tld":"net"},"ip":{"addr":"172.67.187.151","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T04:31:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-04-15T18:07:20.758385Z","alert_count":0,"request_count":5,"received_data":227359,"sent_data":2219,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"oauth.telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":101848,"first_seen":"2018-02-07T13:36:20Z","last_seen":"2026-04-16T23:15:17.48726Z","alert_count":0,"request_count":1,"received_data":2036,"sent_data":618,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"forzaservice.net","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-11","domain_rank":0,"first_seen":"2026-04-21T04:27:29.234817Z","last_seen":"2026-04-21T04:27:29.234817Z","alert_count":0,"request_count":2,"received_data":5440,"sent_data":888,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"oauth.telegram.org/embed/forza_authbot?origin=https%3A%2F%2Fforzaservice.net\u0026return_to=https%3A%2F%2Fforzaservice.net%2F\u0026size=large\u0026request_access=write","fqdn":"oauth.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"53b6be0f202fb25fce4076bd27f2d81a","sha1":"3dd9cf1fafdd5181d0848a1f98c8bf5014f3f48a","sha256":"5a7b86e7a9338bb7c9a0eecd966f2b42a1be4da0e316561a156b3f4671b353db","sha512":"fa18fcb80315b969fc040d03ea94a41a845e352d53b66d46ddbaf95d9ef936eff286e18145ad9519b2174d62e8eb4316f957f85ed71b5fafeed692c69991fdd4","ssdeep":"","tlshash":"2b600000003c330000c33c03c00f30f033c03000000000000000000000c000c0003003","size":13,"data":"","first_seen":"2023-03-07T01:31:07Z","last_seen":"2026-04-21T19:23:00.456089Z","times_seen":733,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/widget-frame.js?66","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4825aabfb1129de5a11f9f2377834d9","sha1":"39d76a8d35fa411e0389e1d3a0d4e9000babfc89","sha256":"53df8dbdcd2cc75a317fdbc07e08e2e75e7e25a052fa2ed03871125f67b50001","sha512":"8c4f764301c1d735c6ea364d9cbbb8a399231f83e857b4322ddb615cda594f82aab5c2ff0528938e4ef97243b1c745bc85e94522a9f5993ccb522808ecce1dff","ssdeep":"768:a3+62J1xNNt3p1SG6CwPHG+AIieDPxsyk7Te9vwCiPZZpMEZF5ibQafIw8JBgHAe:+j2jNt3Qsyk7L1ZF8sv7e6M","tlshash":"3f933f4d69f33166a477b17a9baf55093635d003110ece217d0ca394af84934abfbbe8","size":97101,"data":"","first_seen":"2025-08-28T14:01:30.149557Z","last_seen":"2026-04-21T19:23:00.453721Z","times_seen":752,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forzaservice.net/","fqdn":"forzaservice.net","domain":"forzaservice.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"89f2e025ac4173dadaa96f59190ba464","sha1":"877f775d51d17974d0e775fb34590e3727377ccb","sha256":"aecf0127828db0dbf5fa0d2b8a67f31c98118dccc4deb3a8c5f21833241aba4e","sha512":"64c80e8d7f664e8571181fc6351baf004f5f00dbba402178f1f26421684cafdb45f8c6c6e572f8ecadb2b4bf6967fdb7c1882d9a36755a147c91c9f1fbe0e874","ssdeep":"","tlshash":"f001bd0fa57604b404f326651a1b761038228117310bdda83e1ccbb05f12e5bc9227c8","size":822,"data":"","first_seen":"2026-04-21T04:27:34.913178Z","last_seen":"2026-04-21T04:32:02.763058Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forzaservice.net/","fqdn":"forzaservice.net","domain":"forzaservice.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3ee42b8280d1be0d71cedcd4e9c21c0a","sha1":"2d9d34d7f83d0d103596ecf9cc6c2eff4593aa65","sha256":"f4dd2c96eabdd9f59683c1c48cb9f00a2e70dfe3d73f619d35684e7581cd7ff0","sha512":"6d99edd5a33e765ca6acd91ec33970b8857b52087d5df0848205c84ced51be16c5d79aecbef53587649ff7d3cbb9ae19d7be3bb73b950ca4a0f5f37ecbc5330e","ssdeep":"","tlshash":"2c8000c8ea00a02222032332c02be00f003ac308a00028f820f880fb8a3ca28883280a","size":38,"data":"","first_seen":"2023-03-08T08:41:17Z","last_seen":"2026-04-21T17:38:48.925543Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-widget.js?22","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ff8b98c72268de58837846f2056c65a","sha1":"e77fcc14f1efd17d319c9f82627e5789333b9dbe","sha256":"0f6cdd09b3bbebf50c4e1679aff6f021f5e183a4ba2dea3a0801394599ff6afd","sha512":"1a680a7e87f16520da934f4034cdc601ebef9c306c7f5e3ea165588f044142cadcf5eb06cefedc8ea7768ff63830586a2776351c7b9429f1e33b639adca5f1ed","ssdeep":"384:+vLsc8o/o9o7IFdWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SU0CF3gLcHPb","tlshash":"2492819e1af72224a567713a4b5fa1093232e163700ddc503e6c5b90bf90a6767b0fdd","size":20469,"data":"","first_seen":"2023-04-05T01:44:44Z","last_seen":"2026-04-21T19:23:00.454735Z","times_seen":2540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oauth.telegram.org/embed/forza_authbot?origin=https%3A%2F%2Fforzaservice.net\u0026return_to=https%3A%2F%2Fforzaservice.net%2F\u0026size=large\u0026request_access=write","fqdn":"oauth.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"371adcabba93225441d0b97c5764d108","sha1":"817c7435374cdaf32f898e7f26d7512e6b770e2d","sha256":"849ca47db92a994abe746951c3c9db3372f0dc626e3b5cc5c32b71bcc425f5ae","sha512":"83c81ed0d26a2d0054ca966f6df0c27569ca0da6d0cbf6fa0cef0a7c59ca943fa0b67f6ba7371c32b9d60f44ecbd0a9a63c5804763db99598583b85484b5e189","ssdeep":"","tlshash":"e1c0c0d3b7dc1030d3c840cc0c1113057dc7c0d50806f8fb53799a58819048db527038","size":173,"data":"","first_seen":"2026-04-21T04:27:34.91629Z","last_seen":"2026-04-21T04:32:02.765229Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"forzaservice.net/","fqdn":"forzaservice.net","domain":"forzaservice.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T04:31:29.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"forzaservice.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 22:44:27 GMT","end":"Sat, 11 Jul 2026 23:44:22 GMT"},"fingerprint":{"sha1":"CE:5B:68:0B:48:97:BD:34:96:54:75:19:2A:86:6C:B9:B2:F2:8A:74","sha256":"1A:BF:3E:01:F1:72:62:D0:C4:18:BB:85:CD:94:FD:D3:03:67:53:4F:6D:01:04:7C:AC:CF:55:4F:FE:44:CE:0B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: forzaservice.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 04:31:29 GMT\r\ncontent-type: text/html\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rR%2F762OxaWe7uYtpJ%2BEne1p9DGnPf2dLiIWMRlOAWedELUdHDyEDAAKR4fXJEfKL2xG0REJYy7X7SK17IfwEjGA4RBTKt6v0z0r62eXZ5dRxsTbx3Jc%2B%2Bp7WmKbcYzbQWMie\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ef9a8d33ce27130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4313,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (320)","md5":"bf8c2c900f2ddf0b39cb1d2cac2d3172","sha1":"22dd55233b9819a1e74778856675e28666843701","sha256":"095215a2ecc7d67bbed57b3b079a928789761fb84dd1a9fd8b2901b4eb165f47","sha512":"48d5fbcc36289effbb17c9f1d3b13b6734f42cf9506e0011637fa61c42716d5bef9a0fea179fbdd88301007ec0a3c2fe7b0620050d30887c5aa0f034b1b136f3","ssdeep":"96:sv0Ps5MWpk3oWuZbrO/YqYsCPB7ySUmGJemxkZsHzpQfyiM:s8syWpkYWuZbK/YzBeSUVJDTVyyiM","tlshash":"4491622716610029295320b12fab76173669e047f10bf9383edc9291cfc6ea6dda3384","first_seen":"2026-04-21T04:27:34.897006Z","last_seen":"2026-04-21T04:32:02.753373Z","times_seen":2,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":23,"dns":1,"connect":3,"send":0,"wait":26,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-widget.js?22","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://forzaservice.net/","date":"2026-04-21T04:31:30.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-widget.js?22 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 21 Apr 2026 04:31:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Apr 2023 11:46:12 GMT\r\netag: W/\"642abc84-4ff5\"\r\nexpires: Sat, 25 Apr 2026 04:31:31 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20469,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (423)","md5":"1ff8b98c72268de58837846f2056c65a","sha1":"e77fcc14f1efd17d319c9f82627e5789333b9dbe","sha256":"0f6cdd09b3bbebf50c4e1679aff6f021f5e183a4ba2dea3a0801394599ff6afd","sha512":"1a680a7e87f16520da934f4034cdc601ebef9c306c7f5e3ea165588f044142cadcf5eb06cefedc8ea7768ff63830586a2776351c7b9429f1e33b639adca5f1ed","ssdeep":"384:+vLsc8o/o9o7IFdWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SU0CF3gLcHPb","tlshash":"2492819e1af72224a567713a4b5fa1093232e163700ddc503e6c5b90bf90a6767b0fdd","first_seen":"2023-04-05T01:44:44Z","last_seen":"2026-04-21T19:23:00.454735Z","times_seen":2540,"resource_available":true,"data":null}},"time_used":2197,"timings":{"blocked":1084,"dns":1,"connect":21,"send":0,"wait":23,"receive":0,"ssl":1061},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"forzaservice.net/favicon.ico","fqdn":"forzaservice.net","domain":"forzaservice.net","tld":"net"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://forzaservice.net/","date":"2026-04-21T04:31:30.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"forzaservice.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 22:44:27 GMT","end":"Sat, 11 Jul 2026 23:44:22 GMT"},"fingerprint":{"sha1":"CE:5B:68:0B:48:97:BD:34:96:54:75:19:2A:86:6C:B9:B2:F2:8A:74","sha256":"1A:BF:3E:01:F1:72:62:D0:C4:18:BB:85:CD:94:FD:D3:03:67:53:4F:6D:01:04:7C:AC:CF:55:4F:FE:44:CE:0B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: forzaservice.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 21 Apr 2026 04:31:30 GMT\r\ncontent-length: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K5mOK4q3Zp2K6rAVKxCEC%2FV5R4vvcmQiiyruC68uDbjqOc6qORICWMcG%2FgJkzJP53%2BMff%2FcvBLiwV2pbU3o%2B8IZvgznAz1bqOWtycDFN42PUWPIoCG6IA62nTTudeClO1NFJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ef9a8d539b18deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T22:09:25.934933Z","times_seen":14033814,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oauth.telegram.org/embed/forza_authbot?origin=https%3A%2F%2Fforzaservice.net\u0026return_to=https%3A%2F%2Fforzaservice.net%2F\u0026size=large\u0026request_access=write","fqdn":"oauth.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://forzaservice.net/","date":"2026-04-21T04:31:31.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /embed/forza_authbot?origin=https%3A%2F%2Fforzaservice.net\u0026return_to=https%3A%2F%2Fforzaservice.net%2F\u0026size=large\u0026request_access=write HTTP/1.1\r\nHost: oauth.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 21 Apr 2026 04:31:31 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 713\r\nset-cookie: stel_ssid=53a5637f9039539845_3357583097290236673; expires=Thu, 15 Apr 2027 03:18:50 GMT; path=/; samesite=None; secure; HttpOnly\r\npragma: no-cache\r\ncache-control: no-store\r\nx-frame-options: ALLOW-FROM https://forzaservice.net\r\ncontent-security-policy: frame-ancestors https://forzaservice.net\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1476,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"6d805261d7a90f0ac7a4045f6c3fe784","sha1":"2b554449aaa92947ee2da3183615c1e13c62f37e","sha256":"05331465cd681c008730af448bd04b011fddca4d812b9f61ecaac005ef23cfc7","sha512":"56a23d5b5ee66ab1e20083d000f0ef41e952374ebe0c05c7b493362274edeaf12f0e1ba46912008d49ee923bacb7b597b762d5127d54b606f4f447ec30942bf3","ssdeep":"","tlshash":"433112d356f8d415730100a154c1b2096e99d0cfda4ced4a79dc206adfd5ec5896702e","first_seen":"2026-04-21T04:32:02.757182Z","last_seen":"2026-04-21T04:32:02.757182Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/css/font-roboto.css?1","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oauth.telegram.org/embed/forza_authbot?origin=https%3A%2F%2Fforzaservice.net\u0026return_to=https%3A%2F%2Fforzaservice.net%2F\u0026size=large\u0026request_access=write","date":"2026-04-21T04:31:31.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /css/font-roboto.css?1 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oauth.telegram.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 21 Apr 2026 04:31:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Oct 2022 11:05:33 GMT\r\netag: W/\"63512b7d-1816\"\r\nexpires: Sat, 25 Apr 2026 04:31:31 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6166,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c706681409217a14a24c7e2deb8cf423","sha1":"08b443fe5bc6a223a9de08fb56282365b1d13857","sha256":"84b97b3fa8847b64c6d3833561e4b3146530577171e85ad226578a087db70974","sha512":"2520a5417426cea58972529b3776713958ff259cc8467ebafbe291bd040e27195054c4133f4a9518d78da38ddf4f7cdac64da0813da33bbe707ad13af5baa7c1","ssdeep":"192:KR6tGVFJ3qFl5p3AkmztIZa+XqtRcalH9:wTY7t8t","tlshash":"53d18b40485a6000eb871cd677cf7e3abd8e55053042c576effd14a8adebc269368b4e","first_seen":"2023-05-29T15:15:29Z","last_seen":"2026-04-21T22:15:52.067231Z","times_seen":18162,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/css/widget-frame.css?73","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://oauth.telegram.org/embed/forza_authbot?origin=https%3A%2F%2Fforzaservice.net\u0026return_to=https%3A%2F%2Fforzaservice.net%2F\u0026size=large\u0026request_access=write","date":"2026-04-21T04:31:31.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /css/widget-frame.css?73 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oauth.telegram.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 21 Apr 2026 04:31:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 17:33:59 GMT\r\netag: W/\"697b9a07-162c0\"\r\nexpires: Sat, 25 Apr 2026 04:31:31 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90816,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2404)","md5":"c6e95ea2283d3a6254e7ef8df6f3aaaa","sha1":"06a194cb861a4b5bc627031915f12fed31f660d5","sha256":"cec1c55246920cf7576237abb8db6ed88df513cb8480702adb607c94c7a7a7f3","sha512":"052fd320e7a8c368719384fb6b86e3aabc9e95221d07ce7d65e7f918dc7f7a5f971ee89ae2e5746e14dd5ed86b2059a505781378bc7018f2485b1e93c842aa8d","ssdeep":"1536:excVvHIy0IZMqj/S1PqvJflMSnAk7Zu/2:bZa+1n9u+","tlshash":"4a93c59f5ab1ad08782bc15b74c5761c2b3c9b87d505ee2a9ed930188f80ed5b83370e","first_seen":"2026-01-29T23:12:50.891319Z","last_seen":"2026-04-21T19:23:00.451321Z","times_seen":304,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/widget-frame.js?66","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://oauth.telegram.org/embed/forza_authbot?origin=https%3A%2F%2Fforzaservice.net\u0026return_to=https%3A%2F%2Fforzaservice.net%2F\u0026size=large\u0026request_access=write","date":"2026-04-21T04:31:31.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/widget-frame.js?66 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://oauth.telegram.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 21 Apr 2026 04:31:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 12:46:06 GMT\r\netag: W/\"68b04f8e-17b4e\"\r\nexpires: Sat, 25 Apr 2026 04:31:31 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97102,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3713)","md5":"c4825aabfb1129de5a11f9f2377834d9","sha1":"39d76a8d35fa411e0389e1d3a0d4e9000babfc89","sha256":"53df8dbdcd2cc75a317fdbc07e08e2e75e7e25a052fa2ed03871125f67b50001","sha512":"8c4f764301c1d735c6ea364d9cbbb8a399231f83e857b4322ddb615cda594f82aab5c2ff0528938e4ef97243b1c745bc85e94522a9f5993ccb522808ecce1dff","ssdeep":"768:a3+62J1xNNt3p1SG6CwPHG+AIieDPxsyk7Te9vwCiPZZpMEZF5ibQafIw8JBgHAe:+j2jNt3Qsyk7L1ZF8sv7e6M","tlshash":"3f933f4d69f33166a477b17a9baf55093635d003110ece217d0ca394af84934abfbbe8","first_seen":"2025-08-28T14:01:30.149557Z","last_seen":"2026-04-21T19:23:00.453721Z","times_seen":752,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://oauth.telegram.org/embed/forza_authbot?origin=https%3A%2F%2Fforzaservice.net\u0026return_to=https%3A%2F%2Fforzaservice.net%2F\u0026size=large\u0026request_access=write","date":"2026-04-21T04:31:31.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://oauth.telegram.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 21 Apr 2026 04:31:31 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11028\r\nlast-modified: Thu, 20 Oct 2022 11:05:33 GMT\r\netag: \"63512b7d-2b14\"\r\nexpires: Sat, 25 Apr 2026 04:31:31 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11028,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 11028, version 1.0","md5":"1f6d3cf6d38f25d83d95f5a800b8cac3","sha1":"279f300ca2cbbdf9f5036ef2f438607fbf377daa","sha256":"796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f","sha512":"716305f4d2582683b64c61b5e2390983579ea0fb33c936dd3ea8362872176625fbcb6f5ad18d2abf85da82d14c33a9640dfc5749922cb2fc079ddf37864f361f","ssdeep":"192:4oijUxKA0B3BxJPeLrh00JWNhi5A5HWdZ6SfroKthzwbMcYfQKvwpFVX2T+:Nx4bexHAE6STltlwbMcovaET+","tlshash":"9032cf5eaa417172974b5791e296fbc0e627186438fb02fef85185bbc4045e437092be","first_seen":"2023-04-05T08:50:36Z","last_seen":"2026-04-21T22:15:52.07571Z","times_seen":73650,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}