{"report_id":"366afea4-b64b-421b-a10b-87273cd1bf63","version":6,"status":"done","tags":[],"date":"2025-12-29T11:34:05Z","url":{"schema":"http","addr":"telegram.auto-crypto.click/","fqdn":"telegram.auto-crypto.click","domain":"auto-crypto.click","tld":"click"},"ip":{"addr":"45.148.28.36","port":0,"asn":44803,"as":"Webdock.io ApS","country":"Denmark","country_code":"DK"},"final":{"url":{"schema":"https","addr":"telegram.auto-crypto.click/unauthorized","fqdn":"telegram.auto-crypto.click","domain":"auto-crypto.click","tld":"click"},"title":"Ton Giveaway","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T13:30:23.689695Z","times_seen":17708716,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"telegram.auto-crypto.click/","fqdn":"telegram.auto-crypto.click","domain":"auto-crypto.click","tld":"click"},"ip":{"addr":"45.148.28.36","port":0,"asn":44803,"as":"Webdock.io ApS","country":"Denmark","country_code":"DK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-02T11:34:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"telegram.auto-crypto.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-28","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"blitzwallet.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"raw.githubusercontent.com","ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":22021,"first_seen":"2014-03-01T07:08:08Z","last_seen":"2025-12-22T16:18:01.576226Z","alert_count":0,"request_count":10,"received_data":272851,"sent_data":5069,"comment":"","tags":null,"fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"js.mbidadm.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-02-20","domain_rank":347799,"first_seen":"2023-02-21T18:08:24Z","last_seen":"2025-12-28T13:41:39.008928Z","alert_count":0,"request_count":1,"received_data":148115,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fp.metricswpsh.com","ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-10-29","domain_rank":154722,"first_seen":"2022-04-22T11:20:32Z","last_seen":"2025-12-24T09:25:49.388855Z","alert_count":2,"request_count":2,"received_data":843,"sent_data":1104,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"xtonwallet.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-06","domain_rank":60292,"first_seen":"2022-12-10T21:12:16Z","last_seen":"2025-12-26T04:41:04.824308Z","alert_count":0,"request_count":1,"received_data":8766,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ebn.telemetree.io","ip":{"addr":"142.250.178.83","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2024-03-19","domain_rank":3165908,"first_seen":"2024-10-21T16:35:46Z","last_seen":"2025-10-12T12:24:56.670483Z","alert_count":0,"request_count":1,"received_data":439,"sent_data":616,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}]},{"fqdn":"richinfo.co","ip":{"addr":"109.200.199.111","port":443,"asn":49544,"as":"i3D.net B.V","country":"Italy","country_code":"IT"},"domain_registered":"2019-06-20","domain_rank":162160,"first_seen":"2019-06-26T13:58:03Z","last_seen":"2025-12-21T14:01:16.500156Z","alert_count":0,"request_count":1,"received_data":253635,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"aws-v2-cdn.token.im","ip":{"addr":"34.120.113.83","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2018-06-15T00:09:47Z","last_seen":"2025-12-26T04:41:04.61707Z","alert_count":0,"request_count":1,"received_data":57242,"sent_data":481,"comment":"","tags":null,"fingerprints":null},{"fqdn":"partner.adextra.io","ip":{"addr":"104.21.87.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-09-15","domain_rank":3831780,"first_seen":"2025-06-16T17:14:21.516012Z","last_seen":"2025-06-16T17:14:21.516012Z","alert_count":0,"request_count":2,"received_data":2044,"sent_data":928,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fs.defiway.com","ip":{"addr":"172.67.73.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-10-04","domain_rank":0,"first_seen":"2025-11-19T07:46:42.385021Z","last_seen":"2025-12-26T04:41:05.50827Z","alert_count":0,"request_count":1,"received_data":29965,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pub.tomo.inc","ip":{"addr":"172.67.75.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-09-20","domain_rank":653488,"first_seen":"2023-12-17T07:19:54Z","last_seen":"2025-12-26T04:41:03.439893Z","alert_count":0,"request_count":1,"received_data":2615,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"chain-cdn.uxuy.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2008-03-28","domain_rank":653779,"first_seen":"2025-04-19T14:12:46.272556Z","last_seen":"2025-12-27T11:53:42.337916Z","alert_count":0,"request_count":1,"received_data":5199,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"nereserv.com","ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2020-12-21","domain_rank":17097,"first_seen":"2020-12-21T11:07:56Z","last_seen":"2025-12-24T14:08:44.697857Z","alert_count":2,"request_count":1,"received_data":322,"sent_data":631,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"metricswpsh.com","ip":{"addr":"159.69.167.66","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-10-29","domain_rank":8777,"first_seen":"2021-11-02T17:43:55Z","last_seen":"2025-12-26T06:43:34.261225Z","alert_count":1,"request_count":1,"received_data":322,"sent_data":853,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"w.tads.me","ip":{"addr":"172.67.183.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":2125251,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":29029,"sent_data":418,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"inapp.telega.io","ip":{"addr":"172.66.173.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-20","domain_rank":5104359,"first_seen":"2025-06-16T17:14:21.528009Z","last_seen":"2025-09-08T11:23:49.474561Z","alert_count":0,"request_count":3,"received_data":159489,"sent_data":1610,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rupartner.adextra.io","ip":{"addr":"144.31.85.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2024-09-15","domain_rank":4933899,"first_seen":"2025-08-28T00:57:03.615667Z","last_seen":"2025-08-28T00:57:03.615667Z","alert_count":0,"request_count":2,"received_data":179100,"sent_data":1048,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.mirailabs.co","ip":{"addr":"172.67.73.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-08-20","domain_rank":1551427,"first_seen":"2024-12-30T23:21:28.794146Z","last_seen":"2025-12-26T04:41:05.018116Z","alert_count":0,"request_count":1,"received_data":19295,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tonhub.com","ip":{"addr":"172.67.73.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-02-27","domain_rank":39539,"first_seen":"2015-09-27T02:20:45Z","last_seen":"2025-12-26T04:41:03.353249Z","alert_count":0,"request_count":1,"received_data":70195,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s3.eu-central-1.amazonaws.com","ip":{"addr":"3.5.134.27","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2005-08-18","domain_rank":2522810,"first_seen":"2014-11-23T18:35:48Z","last_seen":"2025-12-25T16:37:39.012186Z","alert_count":0,"request_count":1,"received_data":148399,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"wallet.ton.org","ip":{"addr":"104.26.15.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2003-11-13","domain_rank":654858,"first_seen":"2023-12-21T09:52:39Z","last_seen":"2025-12-21T03:12:17.399513Z","alert_count":0,"request_count":1,"received_data":6414,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}]},{"fqdn":"blitzwallet.cfd","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-26","domain_rank":658393,"first_seen":"2025-07-30T05:48:29.128503Z","last_seen":"2025-12-26T04:41:05.015868Z","alert_count":1,"request_count":1,"received_data":5959,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bid.mbidtg.com","ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-03-09","domain_rank":366400,"first_seen":"2023-03-09T15:21:27Z","last_seen":"2025-12-25T20:42:34.578374Z","alert_count":0,"request_count":1,"received_data":1775,"sent_data":514,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2025-12-23T07:42:55.121369Z","alert_count":0,"request_count":1,"received_data":114323,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"js.mbidinp.com","ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2023-02-20","domain_rank":374893,"first_seen":"2023-04-25T12:26:08Z","last_seen":"2025-12-26T16:32:28.222454Z","alert_count":0,"request_count":2,"received_data":861641,"sent_data":866,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"downloads.mycactus.com","ip":{"addr":"3.167.2.110","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-05-18","domain_rank":0,"first_seen":"2025-08-31T18:01:52.30327Z","last_seen":"2025-12-27T11:53:42.263722Z","alert_count":0,"request_count":1,"received_data":6061,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"uni.onekey-asset.com","ip":{"addr":"89.222.119.81","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"domain_registered":"2021-05-06","domain_rank":0,"first_seen":"2025-09-11T11:43:50.378714Z","last_seen":"2025-12-27T11:53:42.490957Z","alert_count":0,"request_count":1,"received_data":4313,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.nicegram.app","ip":{"addr":"172.67.73.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-05-13","domain_rank":732709,"first_seen":"2025-06-04T21:10:53.348241Z","last_seen":"2025-12-27T11:53:43.151281Z","alert_count":0,"request_count":1,"received_data":11326,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"static.mytonwallet.io","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-03-28","domain_rank":785922,"first_seen":"2024-07-22T10:39:01Z","last_seen":"2025-12-26T04:41:04.739282Z","alert_count":0,"request_count":1,"received_data":5502,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"img.bitgetimg.com","ip":{"addr":"52.84.50.56","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-05-18","domain_rank":1433117,"first_seen":"2022-11-16T14:43:35Z","last_seen":"2025-12-26T04:41:04.274924Z","alert_count":0,"request_count":1,"received_data":2985,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"142.250.150.84","port":443,"asn":15169,"as":"GOOGLE","country":"Finland","country_code":"FI"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-12-29T00:14:05.184038Z","alert_count":0,"request_count":3,"received_data":6931,"sent_data":1784,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}]},{"fqdn":"wallet.tg","ip":{"addr":"45.196.29.102","port":443,"asn":21859,"as":"ZEN-ECN","country":"Philippines","country_code":"PH"},"domain_registered":"2023-09-25","domain_rank":62080,"first_seen":"2020-01-17T23:26:36Z","last_seen":"2025-12-26T04:41:04.349604Z","alert_count":0,"request_count":1,"received_data":25910,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"s.pvcliping.com","ip":{"addr":"154.41.93.241","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"domain_registered":"2017-03-07","domain_rank":1545203,"first_seen":"2020-04-26T05:25:14Z","last_seen":"2025-12-26T04:41:04.660784Z","alert_count":0,"request_count":1,"received_data":1454,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"ntvpforever.com","ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2021-11-18","domain_rank":18811,"first_seen":"2021-11-19T01:49:18Z","last_seen":"2025-12-23T18:36:17.349885Z","alert_count":0,"request_count":2,"received_data":622,"sent_data":1082,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.okx.com","ip":{"addr":"52.84.50.35","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2001-07-03","domain_rank":459285,"first_seen":"2022-12-01T01:12:01Z","last_seen":"2025-12-26T04:41:04.630695Z","alert_count":0,"request_count":2,"received_data":119365,"sent_data":992,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}]},{"fqdn":"cdn.echooo.xyz","ip":{"addr":"34.107.165.184","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2022-05-02","domain_rank":1481817,"first_seen":"2023-11-28T10:02:50Z","last_seen":"2025-12-26T04:41:03.812499Z","alert_count":0,"request_count":1,"received_data":58007,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"mbdippex.com","ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2023-04-26","domain_rank":21571,"first_seen":"2023-06-06T01:40:19Z","last_seen":"2025-12-23T11:38:23.454981Z","alert_count":0,"request_count":2,"received_data":697,"sent_data":1074,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"img.gatedataimg.com","ip":{"addr":"52.84.50.32","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-06-22","domain_rank":1518807,"first_seen":"2024-10-15T18:58:58.853052Z","last_seen":"2025-12-26T04:41:04.040447Z","alert_count":0,"request_count":1,"received_data":8548,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"telegram.auto-crypto.click","ip":{"addr":"45.148.28.36","port":443,"asn":44803,"as":"Webdock.io ApS","country":"Denmark","country_code":"DK"},"domain_registered":"2023-07-22","domain_rank":0,"first_seen":"2025-12-29T11:34:07.557067Z","last_seen":"2025-12-29T11:34:07.557067Z","alert_count":8,"request_count":8,"received_data":806215,"sent_data":8292,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"bapi.tads.me","ip":{"addr":"104.21.18.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-06-19","domain_rank":2165431,"first_seen":"2025-12-29T11:34:07.54096Z","last_seen":"2025-12-29T11:34:07.54096Z","alert_count":0,"request_count":2,"received_data":1419,"sent_data":1046,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hk.tpstatic.net","ip":{"addr":"104.166.182.201","port":443,"asn":21859,"as":"ZEN-ECN","country":"United States","country_code":"US"},"domain_registered":"2022-12-01","domain_rank":1374103,"first_seen":"2023-02-15T11:18:21Z","last_seen":"2025-12-24T06:30:31.534597Z","alert_count":0,"request_count":1,"received_data":11664,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"tonkeeper.com","ip":{"addr":"104.26.2.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-08-20","domain_rank":36988,"first_seen":"2021-08-24T23:38:14Z","last_seen":"2025-12-26T04:41:04.139171Z","alert_count":0,"request_count":2,"received_data":21363,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"public.bnbstatic.com","ip":{"addr":"52.84.50.120","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2018-03-27","domain_rank":355007,"first_seen":"2020-11-23T08:17:23Z","last_seen":"2025-12-24T21:17:15.646697Z","alert_count":0,"request_count":1,"received_data":3915,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-28T22:14:05.525046Z","alert_count":0,"request_count":3,"received_data":87237,"sent_data":1650,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-28T22:17:10.032556Z","alert_count":0,"request_count":1,"received_data":5690,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"s3.eu-central-1.amazonaws.com/cdn.telemetree.io/telemetree-pixel.js","fqdn":"s3.eu-central-1.amazonaws.com","domain":"s3.eu-central-1.amazonaws.com","tld":""},"ip":{"addr":"3.5.134.27","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1aae0d2d2887d40c5908d7f2f4d7e6e3","sha1":"ca2e93a5b8172c8fb6c1649bda994f07e0ab818d","sha256":"507060cad85c8a38125cf564771b3660bf013be033b037041a6a1c93be27c37a","sha512":"8d3822528b8e8a15a5f8fd7922e9ab239f457938fbae0e771eea03552415de4ebcd99be9e5ab27f4f40fac4d96731f432e19373d4d83be1c1d3d07cd1b659ae0","ssdeep":"3072:W7qeXpSJbwE3Ql20OXLgPVzzR/PF3BuF3oDNoyZ9:k3pTQJ09","tlshash":"99e34bc572d9b0a143e360e4053f1407b23a796a191dd0fcf668d9ea5cb8a8d913bf78","size":147969,"data":"","first_seen":"2025-09-04T14:32:16.465758Z","last_seen":"2026-04-07T14:29:03.732371Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.auto-crypto.click/assets/index-BhSMCli2.js","fqdn":"telegram.auto-crypto.click","domain":"auto-crypto.click","tld":"click"},"ip":{"addr":"45.148.28.36","port":443,"asn":44803,"as":"Webdock.io ApS","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"77a94006b2fd9fa38fbe5a5d2a0acc52","sha1":"37395e4cf98d94572c43c9e16e07504d8525e6a3","sha256":"7dace0da55164fcbb23f258f11f2a6dfa00f6c85f7182e652d31b0c7e94cac59","sha512":"e2a682e13f9099ad517867fb45e62d2f2569fcf40326974631b849b21fb9a2f2a62fbddbbb14acae3623353dcd834f96346569ea080aebc6b7e101c4abc9cd57","ssdeep":"6144:+uca6v75tvtl7Sv8j+SYprOHGFXBXM5V8aVcnbL5JvPfENVL+Nj6t56nLrikfJfu:Lmvvt5jHaXoV/SL5JnKVLoExDpJSE","tlshash":"e4b44ad5b386b16113db47d450bb0106f33a2c99780d84a8f36c9dda7e7158882bbfb9","size":495561,"data":"","first_seen":"2025-12-29T11:34:22.743994Z","last_seen":"2025-12-29T11:34:22.743994Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"70dbd7ade763706614c7ee99973dcc9c","sha1":"0b980ef4fe3e17d253fc2cdb672f1208736b733f","sha256":"b47f6cb105860d35b4ae512c22696a33157a365f4c885a33488f22ea8a3b6a03","sha512":"03c1f60831856975b61bea126ead239f116235fb0422178425d6b8c86553a3548d487c919f0f3f81e14de201680f63b7be24106589faffd8f3c56b28c2d19b45","ssdeep":"1536:pO5TpRdo54F0WN2Zbjcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV76/xHK8ITrm:s5TpRdccKFU76x1H","tlshash":"6eb32e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","size":113990,"data":"","first_seen":"2025-07-29T21:33:08.487755Z","last_seen":"2026-07-18T07:05:28.914407Z","times_seen":3814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"partner.adextra.io/jt/bb01709ff696f4ed9edad90bcd7455e9dfc3b771.js","fqdn":"partner.adextra.io","domain":"adextra.io","tld":"io"},"ip":{"addr":"104.21.87.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64c33c8fb4d061652944100e519cd6d3","sha1":"e5c627cb7e02bd6c9035b4f65f93470d198d05cd","sha256":"ec076a76f89bd429bb04d2280511796cda5617d7d028b034af8cecabde5c0857","sha512":"56595a9249fd111f4022ec3689847e1f10b40c2a375fcc8bf6536caf11b4f3c32b8896cb3f3aa89a6fdddf8c1190d1f002c1deef41a1e40a8c0b7bea8ae8d03c","ssdeep":"","tlshash":"efe0f1342cb1c23146271407633fc45031d1606f6401f06d2edcc64caf64fce6c54da4","size":407,"data":"","first_seen":"2025-09-04T14:32:16.456108Z","last_seen":"2025-12-29T11:34:22.740934Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.auto-crypto.click/assets/Unauthorized-CGqiiMyK.js","fqdn":"telegram.auto-crypto.click","domain":"auto-crypto.click","tld":"click"},"ip":{"addr":"45.148.28.36","port":443,"asn":44803,"as":"Webdock.io ApS","country":"Denmark","country_code":"DK"},"introduction_type":"scriptElement","is_inline":false,"md5":"d96308bb14970f86484e034830b903b7","sha1":"891a92ab1367e494495b4982d6ec9f8f7e744743","sha256":"02646291555bd35c2082d5d1479c8a25d91fbb3dace72fa2d0a55d45361affa5","sha512":"dc65e47e30772f4666d96e70536a43a2325c03449a735817fab2293de800beb8466fe55a9baf0e9b3c8248ca8f36d54802accfbfd62ac8d79d3cb9705ff370d8","ssdeep":"","tlshash":"4341858ed642c7f5750a407db4943c19b0909ae8aba1dd4ae7fa0321a4d48f5e44d2fc","size":2043,"data":"","first_seen":"2025-12-29T11:34:22.734145Z","last_seen":"2025-12-29T11:34:22.734145Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.mbidinp.com/npc/sdk/wpu/npush.m.js","fqdn":"js.mbidinp.com","domain":"mbidinp.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5971e1aea23eb692c8ba321767e3d616","sha1":"573f09736f6f905afafc2c19c5f6eb4984aa9f80","sha256":"6cd87ca3f3fa6e118e5cdfca3e2f1120a9e2326574e3de7448aecdf8012ab8d5","sha512":"256c2cabfe3651ea7cc1410c5deea1944344a6442894e55b997ba7f3cb1af177a79cefff5e0d84bb65b27a8b7912a3dec518d8d64352ac3a22cb1e808ef24673","ssdeep":"3072:hfB/9Xkw+QIsv7iIB7xz2/3UepiBz3oQrcQ7clZyQ5CO3ABWV+PQc:hfF9XBz2scQ7iCOwBWV+Pj","tlshash":"88446cd1368478b40593c0aee0770201b2382609f52db56cbabddee96586dce2377f79","size":255991,"data":"","first_seen":"2025-12-11T16:15:42.321021Z","last_seen":"2026-04-18T22:36:13.774074Z","times_seen":830,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.mbidinp.com/skins/nmain.m.js","fqdn":"js.mbidinp.com","domain":"mbidinp.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc975e803629b2688e2e36525ce024c9","sha1":"6ac03bb75a489cd0a49fb67b5b53513d61b0d1a1","sha256":"e2b93e3762332c11ea5ea691614926d6bd50ad11e162434699fc56eca9405e5d","sha512":"10efae7e45a6a456818e53fc52ab7ae9b1f550c4ca6adb3ec1e9d40e66cf0b9671e4e68ef8a699339e615d5161b38b3e794e6c782012d72e8b632f4169abb20b","ssdeep":"12288:bO6w3S6RowOCoO68XFxz9CuIgoQfKjbTxoWbPOSbvVTQBUfRLsddHxchOXEJOOzu:bOxVqufz9CNgoRbxdZUWZW","tlshash":"66d45a3132911139b0bfc8c6aa66278d336cf247e9170f55f96faaa483dbd54f625380","size":604874,"data":"","first_seen":"2025-12-11T16:15:42.358852Z","last_seen":"2026-01-29T09:34:31.702939Z","times_seen":800,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"partner.adextra.io/jt/4e70f1562e10e7032c5858ed66f2d201d1965f25.js","fqdn":"partner.adextra.io","domain":"adextra.io","tld":"io"},"ip":{"addr":"104.21.87.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6aabd59c3d57a8d2b9ed2d66a0d86092","sha1":"4c4c1b924147f409c3967aafbe75d20c826e21fc","sha256":"67b3a180ffd11577bca73bdb0fdda7ba27d425a8b70f95724fb7e6ed2381ab69","sha512":"99c7a0f103ba5fd2f7d1107e833ef443bc32a2363caae1ff74fbe43d0ae228d0cb9f8a5b73b50f7cd2bfd7c90efec4010125a869d99a96c4d272cd32c3861e66","ssdeep":"","tlshash":"68e02b642cb0c2614a261507627fd45075e1601aa405f469aaddc6485e60fda8c59db4","size":407,"data":"","first_seen":"2025-09-04T14:32:16.457214Z","last_seen":"2025-12-29T11:34:22.744863Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.mbidadm.com/static/scripts.js","fqdn":"js.mbidadm.com","domain":"mbidadm.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"45bf2279ae2968e0b223b01b47477328","sha1":"ac4292a0011d1e66cbbd2bbfba05998354f36a06","sha256":"68ecc71625e9a26e79277af11c848a4c48246245247c5aaad21026bd18f597f9","sha512":"fda5194f026a4268c3335d38f5cba8728449c2f5b55492a4522eb7eb7b18afcfa9fd443936518cf5b5cc4cb62d5b8bcc6dcef7e647266d52297df8b103bf2c8e","ssdeep":"1536:O8d+dnC5OPJdWo9aKRcZJotK8sBgpblO12FoX50FtQySd1uj6bzKNRKf7lbg0etc:jAHGJotqYXqd1uObGrK5E0etsz","tlshash":"0de33ad8b2d2b07407e75099d83f1206b73a1a16780c9068f6a5e9c17878ddb523bf7e","size":147727,"data":"","first_seen":"2025-12-24T08:41:20.200071Z","last_seen":"2026-01-15T06:19:14.842063Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inapp.telega.io/sdk/v1/sdk.js","fqdn":"inapp.telega.io","domain":"telega.io","tld":"io"},"ip":{"addr":"172.66.173.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"43cc519b33aeb6225e158f14efd7cc85","sha1":"1e705aec82a2f737fbc188915b8b8b45619abc13","sha256":"a421ffcd8f824c872075394dd8f66e684d244705022f0c747c1c3a3d6b0b373d","sha512":"70746fccd5544ab21506689aede2be78b9a6705abf3b9503936756c2c192978f44578009cf993916abbfd51bdfc3ee62ec6a3cee7a74184948312b2ade86edad","ssdeep":"3072:l+ukt8uBDACNgnEuIoFVXbT7VIpqd2q8z:liDpNgnEXilhIpqdZ8z","tlshash":"8df30aec31beb5666ba346b500af1507733d29171c4c4860b121fdea67b940a90bbfed","size":158067,"data":"","first_seen":"2025-06-16T17:14:29.819548Z","last_seen":"2026-06-05T20:56:19.719219Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"w.tads.me/widget.js","fqdn":"w.tads.me","domain":"tads.me","tld":"me"},"ip":{"addr":"172.67.183.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4ceb9d3819246b2436ce29c01763c38","sha1":"d43d685eb06b4c9de2ef6a8bc453b58418a8ed07","sha256":"31ca71dd7a2e56433c11668bdb892d6e84e8b7c8364871687e5d061caba61494","sha512":"b06e10d77fd49ec86b29c3c88cd91c37fd0aac4c8dc7888d4423cccdbefb824b47d7c88b014d0aa6d72c996e5b31de921500e64fa5b602224a57b34c990c86e7","ssdeep":"768:oLi9m69WMOQ5vkN85KYzWjeKiV14ez/bar57QD33x9wMxI5KoTOMpSUWD/Iar:b1IN8cYzWjeKix0U3x6/PCQSUWDX","tlshash":"62d239467631503193921eaa57fb5350b134710ef9268928b9b8289f231edcdd273bfe","size":28320,"data":"","first_seen":"2025-12-29T11:34:22.701613Z","last_seen":"2025-12-29T11:34:22.701613Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"richinfo.co/richpartners/telegram/js/tg-ob.js","fqdn":"richinfo.co","domain":"richinfo.co","tld":"co"},"ip":{"addr":"109.200.199.111","port":443,"asn":49544,"as":"i3D.net B.V","country":"Italy","country_code":"IT"},"introduction_type":"scriptElement","is_inline":false,"md5":"12a78f58864cade5d164beccd3b3f617","sha1":"eb1a31d615b0fefb556c05b37859669b88e5a92f","sha256":"187da98abe3e2ae125dd08bf8335c464a42b9afb06f84a264cd6c6b571825529","sha512":"2a1f8964af62bf3c1c4617f31bf6e0fc0c0f477666800dd3700bb37fccbc25cbcc5032b4f565edf778a00e4d075312e98135b1d1b8f7dbfece0215eb602e0c74","ssdeep":"6144:HTXnvYVp1BEe+KpaeIG8zgRHrJ5N5nkfvicNKKOVWCYuOtKduXn:HTfYBSE8eIG8UtVnK6ckKrn","tlshash":"0a3470812bc1fc9d13874b763336a5e6e5298f99a4890b8af054fc54f09e913faec570","size":253126,"data":"","first_seen":"2025-12-04T11:23:29.55944Z","last_seen":"2026-02-06T21:49:19.086855Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rupartner.adextra.io/4e70f1562e10e7032c5858ed66f2d201d1965f25/js_ads/assets/index.js","fqdn":"rupartner.adextra.io","domain":"adextra.io","tld":"io"},"ip":{"addr":"144.31.85.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"18b4c3ad532ce5201c931568c73466c6","sha1":"6e282f9ad5578fb89c332054d8d0f04dd8945b60","sha256":"663efc10872629134507181658e7b2d900fc5f46a91401847741a314e2572740","sha512":"e7ee09441b35fc852db9469555d7bb33ccffacd5cfa715c5ef641ddf156fcaf5485820b083a96598cc08c0fefca4e61c6cd5c11e6d3705b475e7465b601a5bb2","ssdeep":"1536:FtR24DNGV4i+3g8XRpmedD15XO1UvQDmNi:VJeY5e1mNi","tlshash":"43930906637d70f1177619b3b2b66017f9684d6ea98cdaf0916ea634fde1202b33d4a0","size":89233,"data":"","first_seen":"2025-12-29T11:34:22.746127Z","last_seen":"2025-12-29T11:34:22.746127Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rupartner.adextra.io/bb01709ff696f4ed9edad90bcd7455e9dfc3b771/js_ads/assets/index.js","fqdn":"rupartner.adextra.io","domain":"adextra.io","tld":"io"},"ip":{"addr":"144.31.85.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a85bf1bcb6f845a4355df8b9b87e07f3","sha1":"bb54048dfb91d0d8edb22643a56b8267e1152db4","sha256":"005853612dd34a7107baf72e1e4da4352e4204484be4c1558a9c2a8c6ecae1df","sha512":"df520e6ccca948edc91a670c4ce36576b855ee6de7c3df239527e6a38f7b6a7cb6a3aa918a5597514dba7502270f8914ee87e291e7a228a5dd29e3ab7bffb306","ssdeep":"1536:FtR24DNGV4i+3g8XRpmedD15XOzUvQDmNi:VJeY5evmNi","tlshash":"6d930a06637d70f1177619b3b2b76017f9684d6ea98cdaf0912ea634fde1202b33d4a0","size":89233,"data":"","first_seen":"2025-12-29T11:34:22.708189Z","last_seen":"2025-12-29T11:34:22.708189Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"w.tads.me/widget.js","fqdn":"w.tads.me","domain":"tads.me","tld":"me"},"ip":{"addr":"172.67.183.236","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:44.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tads.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 11:20:08 GMT","end":"Mon, 02 Mar 2026 12:17:47 GMT"},"fingerprint":{"sha1":"F1:35:2D:56:D9:09:1A:82:9C:6E:87:60:EF:7F:EE:80:7B:43:41:B3","sha256":"2B:8E:AC:AC:8C:D6:96:C4:DA:D2:E6:06:A0:4B:D2:F1:97:EE:92:A8:0B:FD:9F:AA:05:67:CC:02:70:60:C7:8B"}}},"request":{"raw":"GET /widget.js HTTP/1.1\r\nHost: w.tads.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 23 Dec 2025 15:04:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lZHn7EFtEhtHSngDfWtkI87VEBT3NT5NZqThYKuTVimYm%2FF%2FyRsyDMQj8IXu2QVrs17%2FDTy%2BtT%2BIEmjV4YOthtt%2Fjrt9SKFjzg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"694aaf97-6ea0\"\r\ncontent-encoding: br\r\ncf-ray: 9b58fbfafc9c5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28320,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28316)","md5":"a4ceb9d3819246b2436ce29c01763c38","sha1":"d43d685eb06b4c9de2ef6a8bc453b58418a8ed07","sha256":"31ca71dd7a2e56433c11668bdb892d6e84e8b7c8364871687e5d061caba61494","sha512":"b06e10d77fd49ec86b29c3c88cd91c37fd0aac4c8dc7888d4423cccdbefb824b47d7c88b014d0aa6d72c996e5b31de921500e64fa5b602224a57b34c990c86e7","ssdeep":"768:oLi9m69WMOQ5vkN85KYzWjeKiV14ez/bar57QD33x9wMxI5KoTOMpSUWD/Iar:b1IN8cYzWjeKix0U3x6/PCQSUWDX","tlshash":"62d239467631503193921eaa57fb5350b134710ef9268928b9b8289f231edcdd273bfe","first_seen":"2025-12-29T11:34:22.701613Z","last_seen":"2025-12-29T11:34:22.701613Z","times_seen":1,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":63,"dns":21,"connect":2,"send":0,"wait":227,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.auto-crypto.click/api/getAvailableGiveaways","fqdn":"telegram.auto-crypto.click","domain":"auto-crypto.click","tld":"click"},"ip":{"addr":"45.148.28.36","port":443,"asn":44803,"as":"Webdock.io ApS","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:44.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegram.auto-crypto.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 15:35:38 GMT","end":"Thu, 19 Feb 2026 15:35:37 GMT"},"fingerprint":{"sha1":"61:0D:0B:35:4B:87:C7:03:CC:69:A2:7D:66:36:C7:FF:D1:20:65:8D","sha256":"5E:7C:E0:53:4B:73:53:04:B7:39:FA:80:5E:A7:F2:4A:C5:1A:DB:19:CA:9D:00:DC:D6:A0:60:E6:30:2A:8E:29"}}},"request":{"raw":"GET /api/getAvailableGiveaways HTTP/1.1\r\nHost: telegram.auto-crypto.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Window-Telegram: {\"initData\":\"\",\"initDataUnsafe\":{},\"version\":\"6.0\",\"platform\":\"unknown\",\"colorScheme\":\"light\",\"themeParams\":{},\"isExpanded\":true,\"viewportHeight\":1024,\"viewportStableHeight\":1024,\"safeAreaInset\":{\"top\":0,\"bottom\":0,\"left\":0,\"right\":0},\"contentSafeAreaInset\":{\"top\":0,\"bottom\":0,\"left\":0,\"right\":0},\"isClosingConfirmationEnabled\":false,\"isVerticalSwipesEnabled\":true,\"isFullscreen\":false,\"isOrientationLocked\":false,\"isActive\":true,\"bottomBarColor\":\"#ffffff\",\"BackButton\":{\"isVisible\":false},\"MainButton\":{\"type\":\"main\",\"text\":\"Continue\",\"color\":\"#2481cc\",\"textColor\":\"#ffffff\",\"isVisible\":false,\"isProgressVisible\":false,\"isActive\":true,\"hasShineEffect\":false},\"SecondaryButton\":{\"type\":\"secondary\",\"text\":\"Cancel\",\"color\":\"#ffffff\",\"textColor\":\"#2481cc\",\"isVisible\":false,\"isProgressVisible\":false,\"isActive\":true,\"hasShineEffect\":false,\"position\":\"left\"},\"SettingsButton\":{\"isVisible\":false},\"HapticFeedback\":{},\"CloudStorage\":{},\"DeviceStorage\":{},\"SecureStorage\":{},\"BiometricManager\":{\"isInited\":false,\"isBiometricAvailable\":false,\"biometricType\":\"unknown\",\"isAccessRequested\":false,\"isAccessGranted\":false,\"isBiometricTokenSaved\":false,\"deviceId\":\"\"},\"Accelerometer\":{\"isStarted\":false,\"x\":null,\"y\":null,\"z\":null},\"DeviceOrientation\":{\"isStarted\":false,\"absolute\":false,\"alpha\":null,\"beta\":null,\"gamma\":null},\"Gyroscope\":{\"isStarted\":false,\"x\":null,\"y\":null,\"z\":null},\"LocationManager\":{\"isInited\":false,\"isLocationAvailable\":false,\"isAccessRequested\":false,\"isAccessGranted\":false}}\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: application/json; charset=utf-8\r\ndate: Mon, 29 Dec 2025 11:33:44 GMT\r\netag: W/\"1a-pljHtlo127JYJR4E/RYOPb6ucbw\"\r\nx-powered-by: Express\r\ncontent-length: 26\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":26,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6beba43f75111faeb2f4f15e3063e515","sha1":"a658c7b65a35dbb258251e04fd160e3dbeae71bc","sha256":"3e7db788e384631f8a9f299d1797e6f8af6d16d643a1c91f9e83ae15212de45c","sha512":"54d75de1c33fd57bf28a4c8fa2e25a3708e7d2ef543770394fa67c1939b0e7f745eff5d24b37a2cb915e2c24ea6d209bb187453083ddf06cfe1bfabafed71258","ssdeep":"","tlshash":"dc80000008002e2bb302000a32082022880080bc828020238828820c02838c80002a00","first_seen":"2023-05-18T05:21:15Z","last_seen":"2026-08-04T09:12:34.426814Z","times_seen":1596,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"telegram.auto-crypto.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bid.mbidtg.com/tags/309919?version_name=b\u0026domain=telegram.auto-crypto.click","fqdn":"bid.mbidtg.com","domain":"mbidtg.com","tld":"com"},"ip":{"addr":"45.133.44.25","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bid.mbidtg.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Dec 2025 02:32:20 GMT","end":"Sun, 22 Mar 2026 02:32:19 GMT"},"fingerprint":{"sha1":"EA:97:78:73:74:FB:6E:EC:DA:AE:DC:8E:16:8C:D3:C3:4A:4F:15:76","sha256":"B2:C8:C3:6B:87:E4:68:4F:66:54:4D:BB:B6:3C:EA:3D:5B:1E:47:58:20:45:7A:23:F6:FF:F4:91:AE:14:47:96"}}},"request":{"raw":"GET /tags/309919?version_name=b\u0026domain=telegram.auto-crypto.click HTTP/1.1\r\nHost: bid.mbidtg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://telegram.auto-crypto.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:45 GMT\r\ncontent-type: application/json\r\nserver: nginx/1.24.0\r\ncache-control: max-age=300, public\r\nx-cdn-host-id: DS5058\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1536,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5099e5e2f2a262a9a4f95cdbf45f110b","sha1":"021b1b2d551dd7a921077bb8417524ebad03a15b","sha256":"53834d55a3217ad8959e42a4357eb11c7c36fd7ffe597bd740e5d3a819e69be3","sha512":"c558a09a42e552482d355ea23c4d7bad5402e7cc3f08841c80a3df03c74a6f55adf1e02386e47ede2b2506d75f7a159f5271504c5f3c17cd90a3614903e0b0dc","ssdeep":"","tlshash":"0731a778ce30d9b6a1e00b87a1857707555c215bb0843c5cf8ae8c761aee8660e5115b","first_seen":"2025-09-04T14:32:16.459374Z","last_seen":"2025-12-29T11:34:22.703505Z","times_seen":2,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":86,"dns":42,"connect":19,"send":0,"wait":25,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/onidev1/tc-assets/refs/heads/main/kolo_logo_288.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /onidev1/tc-assets/refs/heads/main/kolo_logo_288.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"374f7513a90871ba935756f5e0daf8411b8ed48b612234e664e252240ec3d97e\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: AC24:16D367:11F655:157719:69420997\r\naccept-ranges: bytes\r\ndate: Mon, 29 Dec 2025 11:33:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: HIT\r\nx-cache-hits: 13\r\nx-timer: S1767008026.940848,VS0,VE0\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 4d49d5bb0d6910d742dc576c113f5136a20eb2f4\r\nexpires: Mon, 29 Dec 2025 11:38:45 GMT\r\nsource-age: 277\r\ncontent-length: 11054\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11054,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"5d245f4a7aaf6c0eabc87bcc6f2ad7da","sha1":"2acc98c4ddab14ee07da80e850427c35f998197e","sha256":"88ac39493cf83c698f1737b74f6b697c265843d79d9dd8ef534f7055f3e710f5","sha512":"ad32b213c64fb155087b5438958880397ab11c36cb43dfa285a8b77ee03c4184ccfd3d616b365cc8a9bc3648c0d0226059560115a956652565f4c4e419379b47","ssdeep":"192:bDZXWv0YsB78zH3UY6/9PIaW8JERpGHilkYDaGbp45LWRN8whYEWvt65cLAEYgpe:bFXWvlKAjUftIaWuqAH4jDakyLy8BEAq","tlshash":"c8329ea32b8e02363d77727641568bb8bf273c61151e1cd3423e03a7700a8edd966e17","first_seen":"2025-07-30T05:48:45.370278Z","last_seen":"2026-07-27T15:10:52.905854Z","times_seen":450,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":43,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fs.defiway.com/icons/tonconnect-icon.png","fqdn":"fs.defiway.com","domain":"defiway.com","tld":"com"},"ip":{"addr":"172.67.73.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fs.defiway.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 19 Dec 2025 14:02:20 GMT","end":"Thu, 19 Mar 2026 14:02:19 GMT"},"fingerprint":{"sha1":"70:9A:B2:D5:4C:6F:CF:BB:31:77:74:0F:2A:05:56:F2:94:DB:D1:77","sha256":"5F:86:D7:A9:38:67:6A:4B:28:85:A7:74:98:61:5A:8A:69:43:F7:70:9B:BE:A9:FF:60:F4:4C:B5:7B:9D:8A:94"}}},"request":{"raw":"GET /icons/tonconnect-icon.png HTTP/1.1\r\nHost: fs.defiway.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 28876\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8OXg%2BCRH06a6FBD27qFdjJh3DYJk5sMp2iqipAadJ3I0xU4uuyt9omlP8bH89PtuGBT9PBJk8WhmTBhQKoeDcMKKY0AyQAPsW21w\"}]}\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Mar 2025 16:50:25 GMT\r\nx-rgw-object-type: Normal\r\netag: \"6ee1363265cefef3c3583258b3ed9698\"\r\nx-amz-request-id: tx000004400c4a30cd98c77-006883694e-16933f5ca-fra1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nx-do-cdn-uuid: 0cba47f4-c423-4fc6-be40-f505b7a7f25d\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 98\r\naccept-ranges: bytes\r\nx-frame-options: deny\r\ncf-polished: vary_header_present\r\ncf-bgj: imgq:100,h2pri\r\nx-robots-tag: noindex, follow\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b58fc03893eb4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28876,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"6ee1363265cefef3c3583258b3ed9698","sha1":"f245661de77ae37a4a53c874bf3a3747a24de342","sha256":"3730be86b2cfdd0a70e83d6bcf9b245d3aaa63fcbfc0124c6ac312d89a566516","sha512":"bcef2a81bd9c75bdc092f3607cec39425f7169d94c022617e89683cdb3bf4f9c486b518326eaff1bb42c85e24a742a123898f81a78f7f8af03619d6789ca14fb","ssdeep":"768:3nbqh7HprWHqsbn6saLNpgqpNcH1YWUb+9bLNtTP8Z1W+rJPc6:rqZH9sqkM2WNVb6ltz8ZDBc6","tlshash":"a5d2d0ac3168835e627ef4954e4f6f477905d87677c2adf06876b9c20ab1bd01b4028f","first_seen":"2025-11-18T08:34:38.620185Z","last_seen":"2026-07-27T15:10:52.867933Z","times_seen":172,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":101,"connect":5,"send":0,"wait":11,"receive":1,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inapp.telega.io/api/public/v1/miniapp/ping","fqdn":"inapp.telega.io","domain":"telega.io","tld":"io"},"ip":{"addr":"172.66.173.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:46.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telega.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Dec 2025 13:11:00 GMT","end":"Thu, 05 Mar 2026 14:10:55 GMT"},"fingerprint":{"sha1":"36:82:88:5D:E1:6B:D3:31:34:FE:2D:A8:B2:78:9A:48:F5:06:64:74","sha256":"9A:49:4A:94:DC:CD:4A:E1:63:D6:89:46:D2:3B:B5:C2:D2:33:2E:48:56:0E:CB:AA:A6:1E:4A:D4:16:93:F3:0B"}}},"request":{"raw":"POST /api/public/v1/miniapp/ping HTTP/1.1\r\nHost: inapp.telega.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://telegram.auto-crypto.click/\r\nAuthorization: aa8c9ac9-7441-4c3e-8942-5782b4e98ba9\r\nContent-Type: application/json\r\nContent-Length: 74\r\nOrigin: https://telegram.auto-crypto.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":74,"data":"{\"telegram_user_data\":null,\"token\":\"aa8c9ac9-7441-4c3e-8942-5782b4e98ba9\"}"}},"response":{"raw":"HTTP/2 201 Created\r\ndate: Mon, 29 Dec 2025 11:33:47 GMT\r\ncontent-type: application/json\r\ncontent-length: 4\r\nserver: cloudflare\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\ncache-control: max-age=0, private, must-revalidate\r\netag: W/\"74234e98afe7498fb5daf1f36ac2d78a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvary: Origin\r\nx-request-id: cb358928-4490-4023-9cbb-6c57aa5c8492\r\nx-runtime: 0.004051\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9b58fc087d1a5a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"37a6259cc0c1dae299a7866489dff0bd","sha1":"2be88ca4242c76e8253ac62474851065032d6833","sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","sha512":"04f8ff2682604862e405bf88de102ed7710ac45c1205957625e4ee3e5f5a2241e453614acc451345b91bafc88f38804019c7492444595674e94e8cf4be53817f","ssdeep":"","tlshash":"b9300000000000000000000000000000000300000000000000000000000c0000000000","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-08-04T13:34:50.01527Z","times_seen":281096,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:43.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 29 Dec 2025 11:33:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Jul 2025 14:26:51 GMT\r\netag: W/\"6888da2b-1bd46\"\r\nexpires: Fri, 02 Jan 2026 11:33:44 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113990,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"70dbd7ade763706614c7ee99973dcc9c","sha1":"0b980ef4fe3e17d253fc2cdb672f1208736b733f","sha256":"b47f6cb105860d35b4ae512c22696a33157a365f4c885a33488f22ea8a3b6a03","sha512":"03c1f60831856975b61bea126ead239f116235fb0422178425d6b8c86553a3548d487c919f0f3f81e14de201680f63b7be24106589faffd8f3c56b28c2d19b45","ssdeep":"1536:pO5TpRdo54F0WN2Zbjcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV76/xHK8ITrm:s5TpRdccKFU76x1H","tlshash":"6eb32e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","first_seen":"2025-07-29T21:33:08.487755Z","last_seen":"2026-07-18T07:05:28.914407Z","times_seen":3814,"resource_available":true,"data":null}},"time_used":2188,"timings":{"blocked":1073,"dns":30,"connect":18,"send":0,"wait":41,"receive":0,"ssl":1023},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:44.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://telegram.auto-crypto.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28244\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Dec 2025 06:52:04 GMT\r\nexpires: Wed, 23 Dec 2026 06:52:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 535301\r\nlast-modified: Wed, 27 Aug 2025 19:19:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28244,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28244, version 1.0","md5":"9d503278216c2225184a236c64e0924b","sha1":"0c24c621374506ce70403a7473b47acd86bbf919","sha256":"2add7d60b1cd2ab84c9967e23d5ec08eb3fc9635c46855b17d59404dec6b410e","sha512":"fa1aca723eb40b6026aa1d21b36ce2573e4164516c9a0b55ff830a434c3954833a06b1df76236b1d682107df1bd3d263ed19cba854c1a6795566a7091749696d","ssdeep":"768:/6zZ6KBVHUlHvwCa0z1sCvODsIBMTKmJ3GG5x4:yzdKvwtszvdNjz4","tlshash":"3cc2e083d14afb33d0afb77adc52d022e9756bccec7e587a97a900398895c1b0644285","first_seen":"2025-09-02T18:36:17.739185Z","last_seen":"2026-08-04T12:53:22.105119Z","times_seen":13277,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":323,"dns":4,"connect":29,"send":0,"wait":28,"receive":10,"ssl":284},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rupartner.adextra.io/bb01709ff696f4ed9edad90bcd7455e9dfc3b771/js_ads/assets/index.js","fqdn":"rupartner.adextra.io","domain":"adextra.io","tld":"io"},"ip":{"addr":"144.31.85.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rupartner.adextra.io","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 17:42:43 GMT","end":"Thu, 05 Feb 2026 17:42:42 GMT"},"fingerprint":{"sha1":"67:A6:55:BE:5A:12:93:29:3B:20:E7:04:5D:26:8F:AB:36:FF:52:02","sha256":"09:07:9B:92:D8:3A:95:90:E1:EB:81:50:21:D6:85:C8:EB:7D:E2:77:DF:F1:BB:49:A1:EE:BC:61:E8:3C:FC:F3"}}},"request":{"raw":"GET /bb01709ff696f4ed9edad90bcd7455e9dfc3b771/js_ads/assets/index.js HTTP/1.1\r\nHost: rupartner.adextra.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://telegram.auto-crypto.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 29 Dec 2025 11:33:45 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, no-store, no-cache, proxy-revalidate\r\nsourcemap: /bb01709ff696f4ed9edad90bcd7455e9dfc3b771/js_ads/assets/index.js.map\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89233,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a85bf1bcb6f845a4355df8b9b87e07f3","sha1":"bb54048dfb91d0d8edb22643a56b8267e1152db4","sha256":"005853612dd34a7107baf72e1e4da4352e4204484be4c1558a9c2a8c6ecae1df","sha512":"df520e6ccca948edc91a670c4ce36576b855ee6de7c3df239527e6a38f7b6a7cb6a3aa918a5597514dba7502270f8914ee87e291e7a228a5dd29e3ab7bffb306","ssdeep":"1536:FtR24DNGV4i+3g8XRpmedD15XOzUvQDmNi:VJeY5evmNi","tlshash":"6d930a06637d70f1177619b3b2b76017f9684d6ea98cdaf0912ea634fde1202b33d4a0","first_seen":"2025-12-29T11:34:22.708189Z","last_seen":"2025-12-29T11:34:22.708189Z","times_seen":1,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":73,"dns":33,"connect":23,"send":0,"wait":90,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub.tomo.inc/logo.png","fqdn":"pub.tomo.inc","domain":"tomo.inc","tld":"inc"},"ip":{"addr":"172.67.75.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tomo.inc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 27 Nov 2025 06:45:52 GMT","end":"Wed, 25 Feb 2026 07:45:49 GMT"},"fingerprint":{"sha1":"FA:EF:54:93:AE:16:C0:9C:A9:E6:DC:02:4A:5C:77:25:4A:8D:2E:59","sha256":"8B:EA:3A:65:0B:9B:1B:89:CE:21:CF:44:A7:6E:4D:F9:4F:13:1A:0F:2D:DB:80:81:7A:92:C5:17:A1:03:C2:F1"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: pub.tomo.inc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 1591\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 30 Sep 2025 09:16:32 GMT\r\netag: \"8f17dad664a56d33cb6f4c75d2035436\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=86400, s-maxage=604800, must-revalidate\r\nx-amz-version-id: 464.7eLDvqo.lKuusbDSq0oCBdQs6UZj\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 4TUoIBpFN2SFvQCYZKhI1_17JVyWB42YwdLp1HNO1YPFyjpxLr5bhA==\r\nage: 282846\r\nvary: Origin, accept-encoding\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6xo5c7VMU0PWgaETxDba%2FPb8Fhc%2BbGxxFvE4paSFlPJoic2xPU4ymJxx%2FeKp5sZzZO1WP2P0mgU886nMCdCTOjEvk0IxPzcwaFq7\"}]}\r\ncf-ray: 9b58fc03af8e75ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 75 x 82, 8-bit/color RGBA, non-interlaced","md5":"8f17dad664a56d33cb6f4c75d2035436","sha1":"5c1ffb887bc2090b55030d1140e02371718605f3","sha256":"eb49c3af77e4a4e0e1bbfaca9078c61c8ff50491706fb4f7b900d1f518c1ebf1","sha512":"7f7178a072976860671a0aecda7312605b27879ab878b7edcf8fd47bbfbca29cb4ff100675447b92d3deb520379d4182f0229596f34a7e622cb381b89fd4271e","ssdeep":"","tlshash":"0331ea67e559314d614d531194750afb537fbc08008b8a2ef897813468f047376cd336","first_seen":"2025-06-19T07:38:55.702378Z","last_seen":"2026-07-14T21:36:47.984914Z","times_seen":518,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":102,"dns":15,"connect":64,"send":0,"wait":16,"receive":0,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bapi.tads.me/site_details","fqdn":"bapi.tads.me","domain":"tads.me","tld":"me"},"ip":{"addr":"104.21.18.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:46.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tads.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 11:20:08 GMT","end":"Mon, 02 Mar 2026 12:17:47 GMT"},"fingerprint":{"sha1":"F1:35:2D:56:D9:09:1A:82:9C:6E:87:60:EF:7F:EE:80:7B:43:41:B3","sha256":"2B:8E:AC:AC:8C:D6:96:C4:DA:D2:E6:06:A0:4B:D2:F1:97:EE:92:A8:0B:FD:9F:AA:05:67:CC:02:70:60:C7:8B"}}},"request":{"raw":"GET /site_details HTTP/1.1\r\nHost: bapi.tads.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://telegram.auto-crypto.click/\r\nContent-Type: application/json\r\nOrigin: https://telegram.auto-crypto.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"66-WQcgA1VFBCnPv/czYPj4Ax4Gl4A\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ipqhqTTc4ZmfH4AzuQLJEPn40gufGNjvUa5Sq%2BzeBu1b3Qbf2CJcKOIEWhtpASbgXEmIPc1jd3oLVzu3fKB%2BA%2B2IAZg9DgQunF8%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b58fc025c935699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a863a1aa0da6a5bf7112eeb1c936e944","sha1":"5907200355450429cfbff73360f8f8031e069780","sha256":"0106bb4a53efcbcafc681ef45a2164483584da4dca0d55e914f2dc5e411a5246","sha512":"4d0c083a5451a93774a8d0d8aad4dd3e5e962b87ddbc35f46042883d0f69856140484d7158f21b54f11e89c2454e3010406046b74da990da950f12bb52baa32e","ssdeep":"","tlshash":"adb0120dfb89c0c301fc5e087d506a811ac2124264331b4f9880228089bb7c686f3da4","first_seen":"2025-09-04T14:32:16.445732Z","last_seen":"2025-12-29T11:34:22.709668Z","times_seen":2,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.mbidinp.com/npc/sdk/wpu/npush.m.js","fqdn":"js.mbidinp.com","domain":"mbidinp.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.mbidinp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 02:32:08 GMT","end":"Fri, 13 Mar 2026 02:32:07 GMT"},"fingerprint":{"sha1":"23:36:6D:FD:65:AB:46:FC:1E:82:8C:E6:A7:E6:B4:1A:4E:9B:E0:3D","sha256":"C1:5C:5C:10:34:7C:04:F4:55:7B:87:64:D2:65:4F:0B:C3:84:80:74:4F:53:4B:3A:7B:63:20:25:CE:CA:F3:4E"}}},"request":{"raw":"GET /npc/sdk/wpu/npush.m.js HTTP/1.1\r\nHost: js.mbidinp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 11 Dec 2025 12:18:11 GMT\r\netag: W/\"693ab683-3e7f7\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 29 Dec 2025 11:38:45 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":255991,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5971e1aea23eb692c8ba321767e3d616","sha1":"573f09736f6f905afafc2c19c5f6eb4984aa9f80","sha256":"6cd87ca3f3fa6e118e5cdfca3e2f1120a9e2326574e3de7448aecdf8012ab8d5","sha512":"256c2cabfe3651ea7cc1410c5deea1944344a6442894e55b997ba7f3cb1af177a79cefff5e0d84bb65b27a8b7912a3dec518d8d64352ac3a22cb1e808ef24673","ssdeep":"3072:hfB/9Xkw+QIsv7iIB7xz2/3UepiBz3oQrcQ7clZyQ5CO3ABWV+PQc:hfF9XBz2scQ7iCOwBWV+Pj","tlshash":"88446cd1368478b40593c0aee0770201b2382609f52db56cbabddee96586dce2377f79","first_seen":"2025-12-11T16:15:42.321021Z","last_seen":"2026-04-18T22:36:13.774074Z","times_seen":830,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":159,"dns":27,"connect":25,"send":0,"wait":26,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hk.tpstatic.net/logo/tokenpocket.png","fqdn":"hk.tpstatic.net","domain":"tpstatic.net","tld":"net"},"ip":{"addr":"104.166.182.201","port":443,"asn":21859,"as":"ZEN-ECN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tpstatic.net","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 10 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:92:51:03:51:43:1F:69:88:07:00:07:12:EA:70:77:13:26:48:D7","sha256":"B0:88:73:98:9E:0E:11:19:CB:F7:EE:6A:E2:FB:83:C5:DD:7A:C8:09:80:D0:04:56:BF:21:F3:79:79:C5:01:97"}}},"request":{"raw":"GET /logo/tokenpocket.png HTTP/1.1\r\nHost: hk.tpstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: image/png\r\ncontent-length: 10596\r\nstrict-transport-security: max-age=5184000\r\ndate: Sun, 28 Dec 2025 06:40:13 GMT\r\naccept-ranges: bytes\r\ncontent-md5: vhov8eNwRHtF9aXv6Uw+zQ==\r\nx-bce-content-crc32: 3923604645\r\nx-bce-debug-id: ScWdevjfZWhbggJCqZtwvUI0ym0qJpI2qtdxpnRtOLHVcT5L3pQ4BvmXXvXAtVywzqw6NkmbiGIey38cxDKSOg==\r\nx-bce-flow-control-type: -1\r\nx-bce-is-transition: false\r\nx-bce-meta-md5: be1a2ff1e370447b45f5a5efe94c3ecd\r\nx-bce-meta-origin: bos-browser\r\nx-bce-request-id: 90e899bb-9474-46a5-8f37-33b460af3ecd\r\nx-bce-storage-class: STANDARD\r\nvia: ens-cache11.l2de3[0,0,304-0,H], ens-cache2.l2de3[18,0], ens-cache14.ru8[0,0,200-0,H], ens-cache12.ru8[1,0]\r\netag: \"be1a2ff1e370447b45f5a5efe94c3ecd\"\r\nlast-modified: Wed, 02 Apr 2025 10:13:08 GMT\r\nage: 104013\r\nali-swift-global-savetime: 1766904013\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Sun, 28 Dec 2025 06:40:14 GMT\r\nx-swift-cachetime: 259199\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: 68a6b6a017670080262678266e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10596,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, interlaced","md5":"be1a2ff1e370447b45f5a5efe94c3ecd","sha1":"df75c6c7faa5566f89f63b9538a19362bc32b4be","sha256":"6fe934eec0f6b82dc7d5529fb7291492bd20b0e47489762755eff9f0c13216b3","sha512":"534f51d7da211fde211222cc1f2be34a84a7850278f9b838f38945bae651a3fb2c7f7faceffe5b42ef2b1eac036381199f270fc2e02b75015cf9e8bc9877ee1d","ssdeep":"192:T+aRVty7KqgzJTu8jsqmmmmmmn22BbFRMNJIBe+tstiEto6YdjTTqr9HLQ:TVRm0zJTu8jsS22BTFSgEtGjTOc","tlshash":"21227c91a90bb987d0ccc92e3d17a3e4ed52805522477e036d6a593a6ad3fcf29710c3","first_seen":"2025-04-02T19:01:56.733103Z","last_seen":"2026-06-19T16:25:31.824918Z","times_seen":505,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":132,"connect":64,"send":0,"wait":55,"receive":0,"ssl":201},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inapp.telega.io/api/public/v1/miniapp/ping","fqdn":"inapp.telega.io","domain":"telega.io","tld":"io"},"ip":{"addr":"172.66.173.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:46.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telega.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Dec 2025 13:11:00 GMT","end":"Thu, 05 Mar 2026 14:10:55 GMT"},"fingerprint":{"sha1":"36:82:88:5D:E1:6B:D3:31:34:FE:2D:A8:B2:78:9A:48:F5:06:64:74","sha256":"9A:49:4A:94:DC:CD:4A:E1:63:D6:89:46:D2:3B:B5:C2:D2:33:2E:48:56:0E:CB:AA:A6:1E:4A:D4:16:93:F3:0B"}}},"request":{"raw":"OPTIONS /api/public/v1/miniapp/ping HTTP/1.1\r\nHost: inapp.telega.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://telegram.auto-crypto.click/\r\nOrigin: https://telegram.auto-crypto.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\naccess-control-allow-headers: authorization,content-type\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9b58fc07bb465a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T13:30:23.689695Z","times_seen":17708716,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":137,"dns":1,"connect":2,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.mbidinp.com/skins/nmain.m.js","fqdn":"js.mbidinp.com","domain":"mbidinp.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:46.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.mbidinp.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Dec 2025 02:32:08 GMT","end":"Fri, 13 Mar 2026 02:32:07 GMT"},"fingerprint":{"sha1":"23:36:6D:FD:65:AB:46:FC:1E:82:8C:E6:A7:E6:B4:1A:4E:9B:E0:3D","sha256":"C1:5C:5C:10:34:7C:04:F4:55:7B:87:64:D2:65:4F:0B:C3:84:80:74:4F:53:4B:3A:7B:63:20:25:CE:CA:F3:4E"}}},"request":{"raw":"GET /skins/nmain.m.js HTTP/1.1\r\nHost: js.mbidinp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Thu, 11 Dec 2025 12:18:05 GMT\r\netag: W/\"693ab67d-93aca\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 29 Dec 2025 11:38:46 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":604874,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dc975e803629b2688e2e36525ce024c9","sha1":"6ac03bb75a489cd0a49fb67b5b53513d61b0d1a1","sha256":"e2b93e3762332c11ea5ea691614926d6bd50ad11e162434699fc56eca9405e5d","sha512":"10efae7e45a6a456818e53fc52ab7ae9b1f550c4ca6adb3ec1e9d40e66cf0b9671e4e68ef8a699339e615d5161b38b3e794e6c782012d72e8b632f4169abb20b","ssdeep":"12288:bO6w3S6RowOCoO68XFxz9CuIgoQfKjbTxoWbPOSbvVTQBUfRLsddHxchOXEJOOzu:bOxVqufz9CNgoRbxdZUWZW","tlshash":"66d45a3132911139b0bfc8c6aa66278d336cf247e9170f55f96faaa483dbd54f625380","first_seen":"2025-12-11T16:15:42.358852Z","last_seen":"2026-01-29T09:34:31.702939Z","times_seen":800,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.mirailabs.co/miraihub/miraiapp-tg-icon-288.png","fqdn":"cdn.mirailabs.co","domain":"mirailabs.co","tld":"co"},"ip":{"addr":"172.67.73.146","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mirailabs.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 06:25:13 GMT","end":"Tue, 03 Feb 2026 07:25:11 GMT"},"fingerprint":{"sha1":"3D:2C:D3:3F:8F:AF:5D:11:BA:66:6F:E5:3D:58:BB:FB:E5:41:AE:FC","sha256":"2B:31:9D:C8:53:5C:18:B4:A3:A2:B4:9E:6D:9D:30:98:D2:DE:57:81:64:57:50:0C:09:A9:62:21:A9:90:2A:53"}}},"request":{"raw":"GET /miraihub/miraiapp-tg-icon-288.png HTTP/1.1\r\nHost: cdn.mirailabs.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 18311\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FJtTAkI8b82C5YWsrMSh%2FrAoy8wIPX6%2FWBKlWUp0XlH1fBlyOuw%2Bdm1wxhLcYipxeozSCzaGKmjuIXANgh%2B1ZAiBZwibSiMpmWE3106TuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nlast-modified: Mon, 18 Nov 2024 07:12:54 GMT\r\nx-rgw-object-type: Normal\r\netag: \"57d12d587c1d29716d84971f6500edfa\"\r\ncache-control: max-age=31536000\r\nx-amz-request-id: tx0000067baf48da730cc0b-0068fb413d-61543f72-sgp1b\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-do-cdn-uuid: 1e147e39-c276-4096-8337-87342aa39bc9\r\nage: 487501\r\ncf-cache-status: HIT\r\ncf-ray: 9b58fc03bd8d4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18311,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"57d12d587c1d29716d84971f6500edfa","sha1":"8248c38e246c8c4e0bd277a24fca08ad99d13aea","sha256":"58e318aaefa8826211e50baf8bc3fa9bb0f94742f40d52ea4ef720c44505f0d7","sha512":"f70b20323a7b782daf9cdad642a31c11a3f94cb1fdbb59dd7bec6aa22508960769e5136c28526d1638baa9a7b8bada41ffdf0d86fe8e6bbaee3da31c5993e65d","ssdeep":"384:fx22mC8+nV4XmGI2ZeoYsraCNBgwLDU6xYtwBkU6ArKD6N2:fx2y8+nV4mSrCCNBfLDh6ArrN2","tlshash":"3d82bf7d1c6d98d2033468aff4d55baa4db7f47808ad2f5f582d3286e0533e991b480e","first_seen":"2025-03-12T23:31:41.172248Z","last_seen":"2026-06-30T21:35:26.141576Z","times_seen":608,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":118,"dns":4,"connect":54,"send":0,"wait":12,"receive":1,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.nicegram.app/icon.png","fqdn":"static.nicegram.app","domain":"nicegram.app","tld":"app"},"ip":{"addr":"172.67.73.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nicegram.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Dec 2025 05:41:54 GMT","end":"Mon, 23 Mar 2026 06:41:52 GMT"},"fingerprint":{"sha1":"20:79:51:2B:AF:F3:D5:6D:63:7A:E9:A6:62:7C:A5:7C:D0:D3:BD:2C","sha256":"BF:82:1C:E0:8E:66:86:8D:C0:5B:4C:A9:72:63:46:C1:CC:95:14:68:5D:E5:67:83:7C:3B:48:21:68:87:7B:0A"}}},"request":{"raw":"GET /icon.png HTTP/1.1\r\nHost: static.nicegram.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 10369\r\nlast-modified: Tue, 06 Aug 2024 08:08:04 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: kAuYuMdqBVQNkJdwQG2zujQmg9SuWnrq\r\naccept-ranges: bytes\r\nserver: cloudflare\r\netag: \"985df3bd3834fc07c83a927b30e27a3a\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: QFC2S9L5EP9HHrAMqx5PB4UqDjTVmdeCA-NSF0FjdozofT1MeTRevw==\r\nage: 2197\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XplBMpPjCzpwbqLDFKbu8qaSB87xtB0BHUv7DsstHIh1d%2Fd1GR3bDBRshLC8YHR3Cq1RIFFiCtwr1mMXOzjfh9ja7sEPDqETN5%2Bb8KtoINMhvg%3D%3D\"}]}\r\ncf-ray: 9b58fc03edfe4e4c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":10369,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"985df3bd3834fc07c83a927b30e27a3a","sha1":"d619cbad2567fee893911cbfb9e1b5cac242731d","sha256":"ebd1643bb97d46b3b11c75d07d04733812d87d6ab665f9e5886819bf8b41d039","sha512":"398ab5bb532208882cfff2606264d586881a634959c3d4a4acd50fb8c2f931bb521fa09c7b54c098d148032950d0f9d17ce915885e2faf6e284f030fe75bcdd5","ssdeep":"192:6ZdaM/M/ML+3nHdRuY9J4Kd2JBIUIEFJMfSRmmdEaTMxLvDsjNI:6ZdauuV3LuY92jIxYJUSRdTevDsRI","tlshash":"3d229f5c8b5c82ce99eef978eb18a091f243b4a51850d54d660e3f3f16cf7310889aa5","first_seen":"2025-06-04T21:10:56.167692Z","last_seen":"2026-07-27T15:10:52.902033Z","times_seen":539,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":137,"dns":9,"connect":25,"send":0,"wait":6,"receive":1,"ssl":163},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Quicksand:wght@300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:43.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Quicksand:wght@300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 29 Dec 2025 11:33:43 GMT\r\ndate: Mon, 29 Dec 2025 11:33:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5004,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6706143f62963c98c40a6d718fca87af","sha1":"d8c51eec6f6141d3d3b5a15ebd514c6d96164880","sha256":"d4f69f0f2c75c5c9fd62bc0e089e3ce094fa0eb3d8864ab493180fb1b2600b34","sha512":"bddb97762ace31e0b8b6f7a8d48d71eb3c40e670a1e3bb54b0ad5e83af7bfad4025dc295ccdb90ceae3f0c42756bbe19e0c1316775c6e718bda900be58031298","ssdeep":"96:cqO1aPpO1arJc+uuO1aLNDqOEaPpOEarJc+uuOEaLNDqOXaPpOXarJc+uuOXaLNZ:cAPfvPVNPmvWVOPFv1VEPjvTK","tlshash":"08a1afe1447bb510db871cc122ce7d32ae4ea0547061c9799ffd1888ac9ac25339572d","first_seen":"2025-09-04T14:32:16.449156Z","last_seen":"2026-07-25T02:02:08.644158Z","times_seen":174,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":166,"dns":10,"connect":21,"send":0,"wait":35,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.mytonwallet.io/icon-256.png","fqdn":"static.mytonwallet.io","domain":"mytonwallet.io","tld":"io"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.mytonwallet.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 21:26:30 GMT","end":"Fri, 20 Mar 2026 22:26:20 GMT"},"fingerprint":{"sha1":"96:A8:6A:77:3C:8F:C2:38:FB:F7:89:DC:DF:F7:C3:AE:30:C0:4F:16","sha256":"31:F9:6A:51:96:CC:17:B3:BF:39:47:7C:01:5F:E4:40:1B:19:04:AF:32:06:FE:BA:6D:4E:C3:AC:F3:20:F0:C2"}}},"request":{"raw":"GET /icon-256.png HTTP/1.1\r\nHost: static.mytonwallet.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 4757\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"2c065393c462dd7b5b4a94a114b8f4ee\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mo4oJzbjBJ8ES4Z0Mbguc%2BxIM2AYV2gRI28lKi6QkFZtR8NYgFYCU%2Bh5VJQMFErDfrG2AosNVfIahO7%2FKxa0%2Bz33CXiumOBTcw2xSEH%2BjljB1kr2mQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b58fc027a8f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4757,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"9c99a1956e242fb70baded72541ffd92","sha1":"082f808542c3fb82616e0c72e8eafd0c520531c1","sha256":"01b23585151ba32129c7ea121bb156f4064f6f3234c7e543bc660b775fe54871","sha512":"9fa1a9f1f077ee0092ec5d57a346693cfd2bd1575b3d2d99d411402ad659793313e50bac91118c39ce0d949e1d28de958a1aa214fbd1f8fa9de14881c7c75393","ssdeep":"96:LSyBAvitJVte8Ir4md9tjbJ/6sojcynHwHYqiebuHU:LSyBAQfU8IEmvtjbQxjCZPu0","tlshash":"d8a18d6913a62f00e0be22f33b88a2048767738344716b0b6e69200f3e1cf9501eb1f1","first_seen":"2025-04-19T14:12:50.877844Z","last_seen":"2026-06-28T15:09:18.446084Z","times_seen":931,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":78,"connect":8,"send":0,"wait":23,"receive":0,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.okx.com/cdn/web3/assets/imgs/70d223c0-8527-40c1-8292-b3cc10b53d88.png","fqdn":"static.okx.com","domain":"okx.com","tld":"com"},"ip":{"addr":"52.84.50.35","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.okx.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Wed, 04 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D2:38:2A:1F:20:84:68:74:CD:DC:50:00:85:1B:2D:8A:98:5D:3F","sha256":"E1:BB:9A:FD:D6:9E:AA:06:56:F1:DA:CB:1C:4C:5A:B4:B8:42:10:39:55:0A:7B:77:CF:2D:CE:80:B0:08:9F:E5"}}},"request":{"raw":"GET /cdn/web3/assets/imgs/70d223c0-8527-40c1-8292-b3cc10b53d88.png HTTP/1.1\r\nHost: static.okx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/octet-stream\r\ncontent-length: 114117\r\nserver: Tengine\r\ndate: Wed, 17 Dec 2025 04:51:00 GMT\r\nx-oss-request-id: 694236B46AC5903838F69A19\r\nx-oss-cdn-auth: success\r\naccept-ranges: bytes\r\netag: \"C54306DB0BC9DAB992E04D259D60BB6E\"\r\nlast-modified: Tue, 24 Jun 2025 09:33:52 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11606235468086873758\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\ncache-control: public,max-age=31536000\r\ncontent-md5: xUMG2wvJ2rmS4E0lnWC7bg==\r\nx-oss-server-time: 3\r\nvia: ens-cache37.l2de4[385,384,200-0,M], ens-cache34.l2de4[386,0], ens-cache2.de13[388,388,200-0,M], ens-cache7.de13[390,0], 1.1 2f1d504785a7b18c010970da2bd4ab8c.cloudfront.net (CloudFront)\r\nali-swift-global-savetime: 1765947060\r\nx-swift-savetime: Wed, 17 Dec 2025 04:51:00 GMT\r\nx-swift-cachetime: 0\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: a3b53a9b17659470603926951e\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: v9drVB2rKM7h25RusjgZ5ODubzEnmXf8jrnux6qsK9cMwk7-y8tF9Q==\r\nage: 1060965\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]}],"data":{"size":114117,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"c54306db0bc9dab992e04d259d60bb6e","sha1":"b56c92ffbc78119fe6d678d8ca45dc8bf244bf07","sha256":"bee979d44519b9a9ee607c7709b65f65173df1800f2f314b49e7c84acabc25fe","sha512":"41d2f30bb1b0ff70688c214e7f204c50cb8049b44e518b132ba7fec36699adb7a75b99647b8edc5b3f977807c06c68225bfaf6005d490dd2d7b897f1c7d6984e","ssdeep":"3072:Ltm8ycWaK+s+cFuS3UZW2ABm+RJBdZTzkcSMSwZP7NzPN:k4W3+spu7Wn1RkhfwZJF","tlshash":"47b3127d0f14dfb96c1471b8923e0c2af9e94f0e4856e338026e38ce74d56d18d6b926","first_seen":"2025-10-03T21:27:31.227156Z","last_seen":"2026-07-27T15:10:52.893142Z","times_seen":283,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":69,"connect":12,"send":0,"wait":31,"receive":46,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.okx.com/cdn/web3/assets/imgs/be493af9-09fe-4e93-af0d-d6c4b040cea9.png","fqdn":"static.okx.com","domain":"okx.com","tld":"com"},"ip":{"addr":"52.84.50.35","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.okx.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Wed, 04 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D2:38:2A:1F:20:84:68:74:CD:DC:50:00:85:1B:2D:8A:98:5D:3F","sha256":"E1:BB:9A:FD:D6:9E:AA:06:56:F1:DA:CB:1C:4C:5A:B4:B8:42:10:39:55:0A:7B:77:CF:2D:CE:80:B0:08:9F:E5"}}},"request":{"raw":"GET /cdn/web3/assets/imgs/be493af9-09fe-4e93-af0d-d6c4b040cea9.png HTTP/1.1\r\nHost: static.okx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/octet-stream\r\ncontent-length: 3030\r\nserver: Tengine\r\ndate: Fri, 03 Oct 2025 07:07:05 GMT\r\nx-oss-request-id: 68DF7619EB4F4B323226DE9D\r\nx-oss-cdn-auth: success\r\naccept-ranges: bytes\r\netag: \"394D5BD68796A8FC06693DEC6813A8E4\"\r\nlast-modified: Tue, 24 Jun 2025 09:33:55 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9560207204836553212\r\nx-oss-storage-class: Standard\r\nx-oss-server-side-encryption: AES256\r\ncache-control: public,max-age=31536000\r\ncontent-md5: OU1b1oeWqPwGaT3saBOo5A==\r\nx-oss-server-time: 3\r\nvia: ens-cache6.l2de4[1432,1431,200-0,M], ens-cache14.l2de4[1432,0], ens-cache2.de13[1435,1435,200-0,M], ens-cache3.de13[1437,0], 1.1 2f1d504785a7b18c010970da2bd4ab8c.cloudfront.net (CloudFront)\r\nali-swift-global-savetime: 1759475225\r\nx-swift-savetime: Fri, 03 Oct 2025 07:07:05 GMT\r\nx-swift-cachetime: 0\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: a3b53a9717594752238995801e\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: SEpB90kA3BW3QHtjqThvyenN60qpIJC2ELGmxM67AQDp85DZeBYrqg==\r\nage: 7532800\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"394d5bd68796a8fc06693dec6813a8e4","sha1":"a286c1db877a176467cbb8b15b8c8450e5f31a48","sha256":"045721d4a3c2401263a7c99249b9714e4128a52d3263f3700e08f4c15292e980","sha512":"6c441de022af6a41d6aa455325ef8d003f2c1f93766fbe72420d86f5cb54d19a08429f1a9af427e512126766dd9ca5c9a572cb239550ab14b94726c4eff0e487","ssdeep":"","tlshash":"3a518ed2b20451d91d16ea834fefb21a8724ed1483d2cd5d5e820d54805f4c1be4b7f3","first_seen":"2025-10-05T12:32:21.388914Z","last_seen":"2026-07-27T15:10:52.875155Z","times_seen":247,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":65,"connect":12,"send":0,"wait":23,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/bybit-web3/bybit-web3.github.io/main/docs/images/bybit-logo.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /bybit-web3/bybit-web3.github.io/main/docs/images/bybit-logo.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"fc957d79a09dde604efa1186e885a97f7669a52fb3c2aba4aa522c6e91518c42\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 64F4:37AC4B:25DE46:2B4FAF:6945EEBB\r\naccept-ranges: bytes\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: HIT\r\nx-cache-hits: 69589\r\nx-timer: S1767008026.044847,VS0,VE0\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 9e643ba02af49cdb0cf741b6ca6b14f9fea0a00b\r\nexpires: Mon, 29 Dec 2025 11:38:46 GMT\r\nsource-age: 53\r\ncontent-length: 8225\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":8225,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"5e0935c6eab1c5511a9e7feb27fe30db","sha1":"fe638d9a82f782f9b59151ce2f26680af422f1c4","sha256":"8033687342c3375ab3b21208a4af4ff5f272ad9fef15c9d8d79cbb3c8c147724","sha512":"656df1b4b4a5b19aef528e0d8b0060fd34cf2a8da79a2d3e9ee5e059212952aadbd13dc62c6ee77b862b3025b620a8d5aa8d9de80ec65e69f8ff6bf26c15f112","ssdeep":"192:wSpdi9sODYBglLjsbytX9qunUm9ES61gIbJri8vM:Xp//mnsS9qunUbS66IVE","tlshash":"5c025c9f64ed5438fab30a4a365e043d468f3b552c664d738da5bb97a1783c40c47b32","first_seen":"2024-09-08T13:18:12Z","last_seen":"2026-07-27T15:10:52.862812Z","times_seen":655,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":1,"connect":29,"send":0,"wait":83,"receive":1,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tonhub.com/tonconnect_logo.png","fqdn":"tonhub.com","domain":"tonhub.com","tld":"com"},"ip":{"addr":"172.67.73.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tonhub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 11 Dec 2025 05:00:06 GMT","end":"Wed, 11 Mar 2026 06:00:03 GMT"},"fingerprint":{"sha1":"4A:5D:37:FB:17:A3:10:55:1C:0E:4E:AC:BC:E8:44:40:EE:63:E7:0E","sha256":"11:5B:F0:39:82:70:1F:91:49:3D:80:0F:67:0B:96:DA:C0:1D:5F:A9:2F:AB:DB:A3:41:3C:58:5C:CD:C9:4E:57"}}},"request":{"raw":"GET /tonconnect_logo.png HTTP/1.1\r\nHost: tonhub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 69267\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"tonconnect_logo.png\"\r\netag: \"aafd05d9de4af75985d1b39589517d53\"\r\nlast-modified: Wed, 09 Jul 2025 13:14:52 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /tonconnect_logo.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: fra1::57p4m-1753485404594-425e82e961d1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 505389\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UfoXd8BBxB7JcdbcclgI%2F70TSQ0ZJDIAa7okewt2zzWmEoXm6rRzcJ9Tal0NXjR6eSsZzUZLhsBX49aOKbz4JUvsxrQpOeA%3D\"}]}\r\ncf-ray: 9b58fc01b8b9568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69267,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"aafd05d9de4af75985d1b39589517d53","sha1":"4a55ca19e919bee7bc4a3fd4240c47b8a75f0a9b","sha256":"6781d3a7cdd5d44f7083892ec03d04058bca8214da9e7f27300e9a68e5b6aff3","sha512":"3890e38e55fd770fca7f6a8afddbba3ff6a28ea52fdcf59ec956a18cfc66cf9228cca744d5b2d1a4d76730aebcac3ea746ad9a4147603b3300551b69437fc330","ssdeep":"1536:QsznNmD+76/5T4d8bbZ6CQK/WHEXhyQ+X+:QsDN6n5cgtrQICEXhyhO","tlshash":"c563025cb32bc9197193341250729e49096bcb09710feb8fe7a590e2e7360b979260e7","first_seen":"2024-04-21T23:23:39Z","last_seen":"2026-07-27T15:10:52.879715Z","times_seen":689,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":19,"connect":5,"send":0,"wait":24,"receive":2,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.bitgetimg.com/image/third/1731638059795.png","fqdn":"img.bitgetimg.com","domain":"bitgetimg.com","tld":"com"},"ip":{"addr":"52.84.50.56","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bitgetimg.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 18 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2A:62:D8:BF:3C:71:66:A6:B8:59:AE:13:12:43:5F:AE:B0:26:0E:74","sha256":"0A:97:0D:1E:E0:C0:2A:E9:31:96:E0:5E:69:71:28:EB:EF:3C:A0:13:E5:6C:C9:18:BB:9B:00:4D:2A:DE:6E:4F"}}},"request":{"raw":"GET /image/third/1731638059795.png HTTP/1.1\r\nHost: img.bitgetimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2176\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 15 Nov 2024 02:34:20 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: kTM.fRny3dTfee6kRzxAx9r5poaeak4k\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 29 Dec 2025 06:09:55 GMT\r\ncache-control: public, max-age=2592000;\r\netag: \"66f9465dab82cfa9e91c008cbbd83649\"\r\nvia: 1.1 1ad6d29ff66cbe7838d3a30dae2f9382.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 19432\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding, Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: vBzodzzZXVoipbAF1dv6vFJNtUxE1Ef1JtN8hqrF3XLwXZqjBLmrJg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"66f9465dab82cfa9e91c008cbbd83649","sha1":"1b5637ff897b66c739fe9988075114d834924582","sha256":"ac6d46035cd7a544ecf1978702511542f56d35ca51c729551ba0da5bfc5a9176","sha512":"6aa2e1429617b91a28d51062eecadace89601888912ca88f46d5c2395136f9c3c4a21cac2afa9a2a7f4e5a0603e4654a1a07df910544b1b59bfa25e8f6450729","ssdeep":"","tlshash":"2041dde95a824bf1340a315246797a3fe420c4603916be1f65403fafdf96a794d9c6cc","first_seen":"2024-12-02T10:58:55.343769Z","last_seen":"2026-07-27T15:10:52.904932Z","times_seen":649,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":79,"dns":14,"connect":9,"send":0,"wait":35,"receive":0,"ssl":155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/broxus/sparx-networks/refs/heads/master/icons/sparx/sparx.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /broxus/sparx-networks/refs/heads/master/icons/sparx/sparx.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"70c2807e978791b7810d4fffe5b271e9792d89718c9bcddddfd5a30847a97935\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 4739:83E86:C3C3FF:DEB0BD:694A84B7\r\naccept-ranges: bytes\r\ndate: Mon, 29 Dec 2025 11:33:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: HIT\r\nx-cache-hits: 13\r\nx-timer: S1767008026.940836,VS0,VE0\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 3bb28d557fd0533fc8974f46131ce35184eded7e\r\nexpires: Mon, 29 Dec 2025 11:38:45 GMT\r\nsource-age: 277\r\ncontent-length: 12031\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":12031,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"350d95923ef7019d8c78aa10e3dcc84c","sha1":"f2dd0e01a18a84ac6310bb609df5a3a52c2cd35b","sha256":"d380702b04582bb035eb3e5ebfb4cb99b1944447fed694d759e5b87cb0502b17","sha512":"ac6a84ea2bcb39b631b3eada1b91042c58f3b9650e8bfd52c5f7a473b5b2651a03c2ed3bbc0fa281710f11feff2a0d7924a47f770d95fecd553e543f0b61a3e5","ssdeep":"192:wS4DQJ05f0IFbka5nldHEujoV152XcyLNH7L1GflxCNH/slQvlgmk7uoHWIaLbog:XiXf0i1fHpjuHGx9ilx06QvAu3IaL0zk","tlshash":"b0428ede615d3ac9e13a13f537db186b2e9723bec012b29d29137f160e7a00a9572c5c","first_seen":"2025-12-24T06:30:42.004317Z","last_seen":"2026-08-04T09:02:27.203024Z","times_seen":511,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":43,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"downloads.mycactus.com/288_cactus_link.png","fqdn":"downloads.mycactus.com","domain":"mycactus.com","tld":"com"},"ip":{"addr":"3.167.2.110","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"downloads.mycactus.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 17 Dec 2025 00:00:00 GMT","end":"Thu, 14 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"50:EE:65:C0:BB:87:27:94:78:63:A7:7D:45:AA:8A:72:BB:6E:C2:FE","sha256":"F1:9A:C0:6D:30:EF:2F:DE:45:C1:6B:99:95:B6:B7:FF:2F:43:65:03:7F:EC:82:E9:71:88:F2:BB:B5:A8:D1:10"}}},"request":{"raw":"GET /288_cactus_link.png HTTP/1.1\r\nHost: downloads.mycactus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 5280\r\nlast-modified: Wed, 02 Jul 2025 06:09:46 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: dtZ6yjQHhBuahDGiCVOuo_TehiZNjdaI\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 29 Dec 2025 05:06:29 GMT\r\netag: \"4f6dc6a3820511caa2073cb192f4df57\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c16cb9fc938243bd0209a41893a00da4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: DrnwAtMvBrr-Ixlnt7KwzHH-nTK8LNFg8iOSqqukOlRnWhEwhvL1_g==\r\nage: 23244\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":5280,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"4f6dc6a3820511caa2073cb192f4df57","sha1":"7b22fe8eceab06fbd0143ecad5b5d7cbbc570916","sha256":"be2486209806705bad1d46f293e87a336a791da6228fdd5bce0c2e425f850650","sha512":"38981a8d8cb7ae8d3c2ec6a10768e2861cc815fa7ba99f29172010708559c72da055865bc5de283b92918034b23a0ea9759a1429890d96bcc0b751e1bd33ea26","ssdeep":"96:xWAclvHYEXyzZDY43/AeajwsGZIhgPfvQ4pkVoAlDJH1yyOnnXmkW:xWAc94UUYeQwsTI3le9ltHVkXmkW","tlshash":"d0b14bb3c3419fdc0410323acaf65894ecb0acbe15ac3065941d828e1f7a60dae6599e","first_seen":"2025-08-29T11:48:50.327249Z","last_seen":"2026-07-27T15:10:52.883527Z","times_seen":403,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":183,"dns":6,"connect":34,"send":0,"wait":5,"receive":0,"ssl":135},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.150.84","port":443,"asn":15169,"as":"GOOGLE","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:47.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:3iXv0EK_Vy5S7LCXrhMwJIoQKgKWBA:lbRXT4X5LJHqf1Rv; Expires=Wed, 29-Dec-2027 11:33:47 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 29 Dec 2025 11:33:47 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S338787161:1767008027299519\u0026ifkv=Ac2yZaVxGXtcZl1oT0mJCK7PeSzu8YbwZz2ROsE0y_aYDtOu0u4KLAVR5u2zOiMbP9IaOY_9en5Ohg\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-6SKgIAPW25JBe2zmbblFxg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy: unsafe-none\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T13:30:23.689695Z","times_seen":17708716,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":99,"dns":0,"connect":19,"send":0,"wait":25,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.auto-crypto.click/api/login","fqdn":"telegram.auto-crypto.click","domain":"auto-crypto.click","tld":"click"},"ip":{"addr":"45.148.28.36","port":443,"asn":44803,"as":"Webdock.io ApS","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:44.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegram.auto-crypto.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 15:35:38 GMT","end":"Thu, 19 Feb 2026 15:35:37 GMT"},"fingerprint":{"sha1":"61:0D:0B:35:4B:87:C7:03:CC:69:A2:7D:66:36:C7:FF:D1:20:65:8D","sha256":"5E:7C:E0:53:4B:73:53:04:B7:39:FA:80:5E:A7:F2:4A:C5:1A:DB:19:CA:9D:00:DC:D6:A0:60:E6:30:2A:8E:29"}}},"request":{"raw":"GET /api/login HTTP/1.1\r\nHost: telegram.auto-crypto.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Window-Telegram: {\"initData\":\"\",\"initDataUnsafe\":{},\"version\":\"6.0\",\"platform\":\"unknown\",\"colorScheme\":\"light\",\"themeParams\":{},\"isExpanded\":true,\"viewportHeight\":1024,\"viewportStableHeight\":1024,\"safeAreaInset\":{\"top\":0,\"bottom\":0,\"left\":0,\"right\":0},\"contentSafeAreaInset\":{\"top\":0,\"bottom\":0,\"left\":0,\"right\":0},\"isClosingConfirmationEnabled\":false,\"isVerticalSwipesEnabled\":true,\"isFullscreen\":false,\"isOrientationLocked\":false,\"isActive\":true,\"bottomBarColor\":\"#ffffff\",\"BackButton\":{\"isVisible\":false},\"MainButton\":{\"type\":\"main\",\"text\":\"Continue\",\"color\":\"#2481cc\",\"textColor\":\"#ffffff\",\"isVisible\":false,\"isProgressVisible\":false,\"isActive\":true,\"hasShineEffect\":false},\"SecondaryButton\":{\"type\":\"secondary\",\"text\":\"Cancel\",\"color\":\"#ffffff\",\"textColor\":\"#2481cc\",\"isVisible\":false,\"isProgressVisible\":false,\"isActive\":true,\"hasShineEffect\":false,\"position\":\"left\"},\"SettingsButton\":{\"isVisible\":false},\"HapticFeedback\":{},\"CloudStorage\":{},\"DeviceStorage\":{},\"SecureStorage\":{},\"BiometricManager\":{\"isInited\":false,\"isBiometricAvailable\":false,\"biometricType\":\"unknown\",\"isAccessRequested\":false,\"isAccessGranted\":false,\"isBiometricTokenSaved\":false,\"deviceId\":\"\"},\"Accelerometer\":{\"isStarted\":false,\"x\":null,\"y\":null,\"z\":null},\"DeviceOrientation\":{\"isStarted\":false,\"absolute\":false,\"alpha\":null,\"beta\":null,\"gamma\":null},\"Gyroscope\":{\"isStarted\":false,\"x\":null,\"y\":null,\"z\":null},\"LocationManager\":{\"isInited\":false,\"isLocationAvailable\":false,\"isAccessRequested\":false,\"isAccessGranted\":false}}\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: application/json; charset=utf-8\r\ndate: Mon, 29 Dec 2025 11:33:44 GMT\r\netag: W/\"1a-pljHtlo127JYJR4E/RYOPb6ucbw\"\r\nx-powered-by: Express\r\ncontent-length: 26\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":26,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6beba43f75111faeb2f4f15e3063e515","sha1":"a658c7b65a35dbb258251e04fd160e3dbeae71bc","sha256":"3e7db788e384631f8a9f299d1797e6f8af6d16d643a1c91f9e83ae15212de45c","sha512":"54d75de1c33fd57bf28a4c8fa2e25a3708e7d2ef543770394fa67c1939b0e7f745eff5d24b37a2cb915e2c24ea6d209bb187453083ddf06cfe1bfabafed71258","ssdeep":"","tlshash":"dc80000008002e2bb302000a32082022880080bc828020238828820c02838c80002a00","first_seen":"2023-05-18T05:21:15Z","last_seen":"2026-08-04T09:12:34.426814Z","times_seen":1596,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"telegram.auto-crypto.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.auto-crypto.click/api/getHourlyRewardStatus","fqdn":"telegram.auto-crypto.click","domain":"auto-crypto.click","tld":"click"},"ip":{"addr":"45.148.28.36","port":443,"asn":44803,"as":"Webdock.io ApS","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:44.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegram.auto-crypto.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 15:35:38 GMT","end":"Thu, 19 Feb 2026 15:35:37 GMT"},"fingerprint":{"sha1":"61:0D:0B:35:4B:87:C7:03:CC:69:A2:7D:66:36:C7:FF:D1:20:65:8D","sha256":"5E:7C:E0:53:4B:73:53:04:B7:39:FA:80:5E:A7:F2:4A:C5:1A:DB:19:CA:9D:00:DC:D6:A0:60:E6:30:2A:8E:29"}}},"request":{"raw":"GET /api/getHourlyRewardStatus HTTP/1.1\r\nHost: telegram.auto-crypto.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Window-Telegram: {\"initData\":\"\",\"initDataUnsafe\":{},\"version\":\"6.0\",\"platform\":\"unknown\",\"colorScheme\":\"light\",\"themeParams\":{},\"isExpanded\":true,\"viewportHeight\":1024,\"viewportStableHeight\":1024,\"safeAreaInset\":{\"top\":0,\"bottom\":0,\"left\":0,\"right\":0},\"contentSafeAreaInset\":{\"top\":0,\"bottom\":0,\"left\":0,\"right\":0},\"isClosingConfirmationEnabled\":false,\"isVerticalSwipesEnabled\":true,\"isFullscreen\":false,\"isOrientationLocked\":false,\"isActive\":true,\"bottomBarColor\":\"#ffffff\",\"BackButton\":{\"isVisible\":false},\"MainButton\":{\"type\":\"main\",\"text\":\"Continue\",\"color\":\"#2481cc\",\"textColor\":\"#ffffff\",\"isVisible\":false,\"isProgressVisible\":false,\"isActive\":true,\"hasShineEffect\":false},\"SecondaryButton\":{\"type\":\"secondary\",\"text\":\"Cancel\",\"color\":\"#ffffff\",\"textColor\":\"#2481cc\",\"isVisible\":false,\"isProgressVisible\":false,\"isActive\":true,\"hasShineEffect\":false,\"position\":\"left\"},\"SettingsButton\":{\"isVisible\":false},\"HapticFeedback\":{},\"CloudStorage\":{},\"DeviceStorage\":{},\"SecureStorage\":{},\"BiometricManager\":{\"isInited\":false,\"isBiometricAvailable\":false,\"biometricType\":\"unknown\",\"isAccessRequested\":false,\"isAccessGranted\":false,\"isBiometricTokenSaved\":false,\"deviceId\":\"\"},\"Accelerometer\":{\"isStarted\":false,\"x\":null,\"y\":null,\"z\":null},\"DeviceOrientation\":{\"isStarted\":false,\"absolute\":false,\"alpha\":null,\"beta\":null,\"gamma\":null},\"Gyroscope\":{\"isStarted\":false,\"x\":null,\"y\":null,\"z\":null},\"LocationManager\":{\"isInited\":false,\"isLocationAvailable\":false,\"isAccessRequested\":false,\"isAccessGranted\":false}}\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: application/json; charset=utf-8\r\ndate: Mon, 29 Dec 2025 11:33:44 GMT\r\netag: W/\"1a-pljHtlo127JYJR4E/RYOPb6ucbw\"\r\nx-powered-by: Express\r\ncontent-length: 26\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":26,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6beba43f75111faeb2f4f15e3063e515","sha1":"a658c7b65a35dbb258251e04fd160e3dbeae71bc","sha256":"3e7db788e384631f8a9f299d1797e6f8af6d16d643a1c91f9e83ae15212de45c","sha512":"54d75de1c33fd57bf28a4c8fa2e25a3708e7d2ef543770394fa67c1939b0e7f745eff5d24b37a2cb915e2c24ea6d209bb187453083ddf06cfe1bfabafed71258","ssdeep":"","tlshash":"dc80000008002e2bb302000a32082022880080bc828020238828820c02838c80002a00","first_seen":"2023-05-18T05:21:15Z","last_seen":"2026-08-04T09:12:34.426814Z","times_seen":1596,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"telegram.auto-crypto.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.eu-central-1.amazonaws.com/cdn.telemetree.io/telemetree-pixel.js","fqdn":"s3.eu-central-1.amazonaws.com","domain":"s3.eu-central-1.amazonaws.com","tld":""},"ip":{"addr":"3.5.134.27","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.eu-central-1.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 15 Jul 2025 00:00:00 GMT","end":"Sun, 21 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E5:4F:26:E0:71:90:32:41:A4:FA:E3:BD:C5:39:BC:0F:B5:16:3B:08","sha256":"16:01:4A:A0:C2:AC:D9:77:EA:81:85:8B:B5:D7:38:F7:F9:68:11:CF:C7:6D:14:87:33:68:A5:34:51:8B:38:D5"}}},"request":{"raw":"GET /cdn.telemetree.io/telemetree-pixel.js HTTP/1.1\r\nHost: s3.eu-central-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: f3QniqId14z8NKdzFd3EaIC1FUGkx4ZET17Bunvs4H0q9Fvf3PySvpRjPnlotmLlkBglncSX49SvEzx0qn0W5IZ64HDNv0JY\r\nx-amz-request-id: ME1XK4JVXQDTVSTK\r\nDate: Mon, 29 Dec 2025 11:33:46 GMT\r\nLast-Modified: Tue, 03 Jun 2025 12:58:41 GMT\r\nETag: \"1aae0d2d2887d40c5908d7f2f4d7e6e3\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: application/javascript\r\nContent-Length: 147969\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":147969,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27613)","md5":"1aae0d2d2887d40c5908d7f2f4d7e6e3","sha1":"ca2e93a5b8172c8fb6c1649bda994f07e0ab818d","sha256":"507060cad85c8a38125cf564771b3660bf013be033b037041a6a1c93be27c37a","sha512":"8d3822528b8e8a15a5f8fd7922e9ab239f457938fbae0e771eea03552415de4ebcd99be9e5ab27f4f40fac4d96731f432e19373d4d83be1c1d3d07cd1b659ae0","ssdeep":"3072:W7qeXpSJbwE3Ql20OXLgPVzzR/PF3BuF3oDNoyZ9:k3pTQJ09","tlshash":"99e34bc572d9b0a143e360e4053f1407b23a796a191dd0fcf668d9ea5cb8a8d913bf78","first_seen":"2025-09-04T14:32:16.465758Z","last_seen":"2026-04-07T14:29:03.732371Z","times_seen":9,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":172,"dns":14,"connect":20,"send":0,"wait":49,"receive":45,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.tg/images/logo-288.png","fqdn":"wallet.tg","domain":"wallet.tg","tld":"tg"},"ip":{"addr":"45.196.29.102","port":443,"asn":21859,"as":"ZEN-ECN","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"wallet.tg","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Nov 2025 05:06:33 GMT","end":"Tue, 24 Feb 2026 06:06:15 GMT"},"fingerprint":{"sha1":"A9:03:35:44:BD:67:51:B9:D9:38:1A:48:BF:7D:16:3F:2E:C8:70:37","sha256":"24:67:7B:F5:D8:E1:8C:26:AF:10:6E:02:38:0D:01:25:2B:67:5D:42:68:2A:63:7B:83:F0:1E:0D:B8:1F:3F:A4"}}},"request":{"raw":"GET /images/logo-288.png HTTP/1.1\r\nHost: wallet.tg\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 24341\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self';  connect-src 'self' https://sentry.walletbot.me http://localhost:1337;  script-src 'self' 'unsafe-eval' 'unsafe-inline';  style-src 'self' 'unsafe-inline';  img-src 'self' blob: data: http://localhost:1337;  media-src 'self' http://localhost:1337;  font-src 'self';  object-src 'none';  base-uri 'self';  form-action 'self';  frame-src 'none';  frame-ancestors 'none';  upgrade-insecure-requests;\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 12 Dec 2025 15:11:47 GMT\r\netag: W/\"5f15-19b131e3b38\"\r\nage: 3543\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=ksIGs_oB82ZpusDGDCLbgXYMv5PyxrJKhfbXItYUA1I-1767008025.8468428-1.0.1.1-GzRAH_yod_jU7YHnKBYbtYeFQw6ROc94rRaxumFiu11Ka4oXkhQlrTSUwPFFju18fcDEW4xxu1f27EeXFfMtp5dM6OpQlcEB5jMDyLYHhIcFK96JcEUJ1XHLW2oyUikF; HttpOnly; Secure; Path=/; Domain=wallet.tg; Expires=Mon, 29 Dec 2025 12:03:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TLRrg8YXVFN2b31VmHH0YZLv1SyKBOOUL2ptEgoGubv9civK5mQDGdz8TyB5BZkQT%2BUdC9aE2xFo%2F7%2BBvJgUg8jpGDx59w6y\"}]}\r\nserver: cloudflare\r\ncf-ray: 9b58fc018a8e783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":24341,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"ea821489af4c2e485a86112942971907","sha1":"3fb8aab37a0bc8a4394c296adf2249f1ad494faf","sha256":"6c30dcf8baf07a22361167e8dc7e8152274db474fadf9eea0a1e7bcd9a24df9e","sha512":"c56226380bc790cd2426d8ba38acd67e52a7247302e653646c37d7809a229d6ffc085a1030de216392c51ba5c90ea6b27d43ae3700236abbadfe18f8c5b052dd","ssdeep":"384:U6Mamo5oPY3GXjRKfmka0+sGGoc5Km3ow/745k5o1RH1kL4DcfXSPG0u/Whpr:UlamvPKGXj+mF0TG3c53Yw/745wo1o4R","tlshash":"41b2e1c9968bd133bc4a5d4865985e39c6282c363d13d6056f1b72b88bf380e91d8ed9","first_seen":"2024-04-21T23:23:38Z","last_seen":"2026-08-04T09:02:27.258065Z","times_seen":839,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":81,"dns":32,"connect":1,"send":0,"wait":17,"receive":1,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/OpenProduct/openmask-extension/main/public/openmask-logo-288.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /OpenProduct/openmask-extension/main/public/openmask-logo-288.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"3bd3143ce8353aa8b9d4296ec4a937b1000cf8fc46a68e40afc9cb03a4030555\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: D22F:3D793:534B24:5DF0D3:6949E719\r\naccept-ranges: bytes\r\ndate: Mon, 29 Dec 2025 11:33:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: HIT\r\nx-cache-hits: 13\r\nx-timer: S1767008026.941335,VS0,VE0\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 933bb0bfabff9bc194b9b9a235aa8fc54adc30e8\r\nexpires: Mon, 29 Dec 2025 11:38:45 GMT\r\nsource-age: 277\r\ncontent-length: 6912\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":6912,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"01781f31a294a7f938b3465853c3c415","sha1":"1bd08a5089fea9a6fb60fdecd76d6442167d9830","sha256":"25ef6e0912f90e0adea8597b19554aa1518521e6cf0a88cfaec303808cf4d4b8","sha512":"c6cf1a428835fb81d444169095fb143ef8aece980d9ce0e06f53e98a1f40c03c554efd9b53f5ef56d983711bc59e2f26a44f87e694c512db551e1bd082b96140","ssdeep":"96:7c3GRYpoQxCYkE/FESncoi3MaINhe42kPHVOMjoRKnpdY+o4QfuVg7w6Wgcl2JCx:7DYi9oFnp9ame4zYApM4QGV56WgSCojv","tlshash":"7ae129a8e70ca7b5c9689537a5205db2ccc2064c7b785a00d0eff895b6b7c77e03612b","first_seen":"2024-04-21T23:23:38Z","last_seen":"2026-07-27T15:10:52.888301Z","times_seen":686,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":58,"dns":21,"connect":0,"send":0,"wait":94,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.echooo.xyz/front-end/source/images/logo/echooo-ton.png","fqdn":"cdn.echooo.xyz","domain":"echooo.xyz","tld":"xyz"},"ip":{"addr":"34.107.165.184","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.echooo.xyz","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Dec 2025 20:10:12 GMT","end":"Tue, 17 Mar 2026 21:04:06 GMT"},"fingerprint":{"sha1":"A8:03:11:62:5C:D7:15:32:5D:44:71:E8:47:5D:BF:E5:DD:0F:A7:CE","sha256":"F3:CF:FE:62:28:3A:FF:59:2B:C9:6B:F0:1A:55:DB:7E:52:65:AE:61:8D:1F:09:99:63:BC:E7:17:FA:F6:5B:D8"}}},"request":{"raw":"GET /front-end/source/images/logo/echooo-ton.png HTTP/1.1\r\nHost: cdn.echooo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AHVrFxP2FZeJ3IFpMeXuAtwX0FvpaCECoNqmK-jnxA1Eqh9I6OfHsFeHKBGd2J_HudNG-_o1\r\nx-goog-generation: 1756203107371455\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 57073\r\nx-goog-meta-x-goog-source-etag: \"9b7e680959bb5ea32968179a4bc28833\"\r\nx-goog-hash: crc32c=zn8mJQ==, md5=m35oCVm7XqMpaBeaS8KIMw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nserver: UploadServer\r\nvia: 1.1 google\r\ndate: Mon, 29 Dec 2025 11:03:39 GMT\r\nage: 1807\r\nlast-modified: Tue, 26 Aug 2025 10:11:47 GMT\r\netag: \"9b7e680959bb5ea32968179a4bc28833\"\r\ncontent-type: image/png\r\ncontent-length: 57073\r\ncache-control: public,max-age=3600\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":57073,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"9b7e680959bb5ea32968179a4bc28833","sha1":"ed56c1a714e389fd8ff249de91e2f0931b305656","sha256":"ca76a445dc84da7193cadee87f415c8d32b411cfb1f386ea1ff1d1eae38aef82","sha512":"1e5b1defa2bc4d5579013355e989138aaa55222dc55f8c6ebd2879da25c1bb1f93875bab289ed5fd4d7655b43ce5e0af4ed3ffa4ce2376beddb0eab7c18c5665","ssdeep":"1536:IWuiwdBrZGLQ7mdrdtnhnUs8ftmvwpE04iW8Kx:ISWZZGrQs+tmj0Qx","tlshash":"83430151d1e0aa70ee1cf34e4aa290385429269f97f7117dc2d70c336aefba11e34997","first_seen":"2025-07-02T07:18:44.840133Z","last_seen":"2026-07-27T15:10:52.866441Z","times_seen":502,"resource_available":false,"data":null}},"time_used":977,"timings":{"blocked":149,"dns":6,"connect":38,"send":0,"wait":28,"receive":41,"ssl":677},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uni.onekey-asset.com/static/logo/onekey-x288.png","fqdn":"uni.onekey-asset.com","domain":"onekey-asset.com","tld":"com"},"ip":{"addr":"89.222.119.81","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.onekey-asset.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 28 May 2025 00:00:00 GMT","end":"Wed, 27 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BD:65:E0:78:19:D7:CF:F5:59:3D:57:BE:62:BF:2B:98:FE:F8:78:A8","sha256":"A8:DC:58:04:6B:77:E6:A0:89:BB:EE:C6:F5:56:2B:EA:9B:46:D8:A0:1F:91:93:3D:B5:27:99:AC:A8:56:8E:10"}}},"request":{"raw":"GET /static/logo/onekey-x288.png HTTP/1.1\r\nHost: uni.onekey-asset.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Byte-nginx\r\ncontent-type: image/png\r\ncontent-length: 3209\r\naccept-ranges: bytes\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\netag: \"04094bbdf108920e8e4c75750b48b1df\"\r\nlast-modified: Wed, 06 Aug 2025 06:44:26 GMT\r\nvia: cache05.oversea-NL-AMS6,cache04.oversea-GM-FRA12\r\nx-bdcdn-cache-status: TCP_MISS,TCP_MISS\r\nx-request-id: f06ece998bab6835e44ba996e2891c83\r\nx-request-ip: 91.90.42.154\r\nx-response-cache: miss\r\nx-response-cinfo: 91.90.42.154\r\nx-tos-create-time: Wed, 06 Aug 2025 06:44:26 GMT\r\nx-tos-cs-type: CDN\r\nx-tos-hash-crc64ecma: 6025264620012229505\r\nx-tos-id-2: c1b20152671afda96952671a-b0c59d9-1vaBVS-GO-as1-tos-front-azb-6\r\nx-tos-meta-response-origin-last-modified: 1744632114\r\nx-tos-request-id: c1b20152671afda96952671a-b0c59d9-1vaBVS-GO-as1-tos-front-azb-6\r\nx-tos-server-time: 2\r\nx-tos-storage-class: STANDARD\r\nx-tt-trace-tag: id=5\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3209,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"04094bbdf108920e8e4c75750b48b1df","sha1":"030393c096883ecd5ccd9d1f502257b6a8cc0420","sha256":"a022264b5beb3e6e6490f4f638b9a8cffef8dc30f87f1fb53621ad358e1880cf","sha512":"a86d86be24ba0895e24bb772ab02472469f931db3bb9652b8fe829c206aaed372725e170cc70ce8c86b93001ef05a31a95864c2210e15efb65761bf9151d74cf","ssdeep":"","tlshash":"37618fc8085602f57a2a759553347a3fe421c1397c187e6e6201bfabcb82b7c5cd938a","first_seen":"2025-09-11T12:18:55.160701Z","last_seen":"2026-07-27T15:10:52.894177Z","times_seen":313,"resource_available":false,"data":null}},"time_used":1160,"timings":{"blocked":182,"dns":6,"connect":49,"send":0,"wait":316,"receive":0,"ssl":591},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mbdippex.com/keywords","fqdn":"mbdippex.com","domain":"mbdippex.com","tld":"com"},"ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:46.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"POST /keywords HTTP/1.1\r\nHost: mbdippex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 87\r\nOrigin: https://telegram.auto-crypto.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":87,"data":"{\"ad_tags\":\"Ton%2CGiveaway\",\"page\":\"https%3A//telegram.auto-crypto.click/unauthorized\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Mon, 29 Dec 2025 11:33:45 GMT\r\ncontent-type: application/json\r\ncontent-length: 31\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d0e3bfba119ceb3c7712f533af0b314a","sha1":"d3dd5d05cd3562095d03869a55d12f64c113de37","sha256":"6a0be29afde74fc112ddeeae7acd7c7b5ee0253a8e06f7c84ff2c1f954eb74d8","sha512":"742d32dac8e6d56d04949373ea5f3332d7a78cc263696fee48fea19d2343ba35af31ecc46a2cd189e363a6c729736def95c1d358d5e1a458d9b49b4c69eaad8e","ssdeep":"","tlshash":"2380040414455451cdd0500d3534c5145415d54110414d543154d001435c300440cc57","first_seen":"2024-08-20T11:01:54.434372Z","last_seen":"2026-07-20T11:34:12.047985Z","times_seen":9,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"inapp.telega.io/sdk/v1/sdk.js","fqdn":"inapp.telega.io","domain":"telega.io","tld":"io"},"ip":{"addr":"172.66.173.218","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:44.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telega.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Dec 2025 13:11:00 GMT","end":"Thu, 05 Mar 2026 14:10:55 GMT"},"fingerprint":{"sha1":"36:82:88:5D:E1:6B:D3:31:34:FE:2D:A8:B2:78:9A:48:F5:06:64:74","sha256":"9A:49:4A:94:DC:CD:4A:E1:63:D6:89:46:D2:3B:B5:C2:D2:33:2E:48:56:0E:CB:AA:A6:1E:4A:D4:16:93:F3:0B"}}},"request":{"raw":"GET /sdk/v1/sdk.js HTTP/1.1\r\nHost: inapp.telega.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:44 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Wed, 12 Nov 2025 05:07:45 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\ncf-ray: 9b58fbfb1ce65a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158067,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37529)","md5":"43cc519b33aeb6225e158f14efd7cc85","sha1":"1e705aec82a2f737fbc188915b8b8b45619abc13","sha256":"a421ffcd8f824c872075394dd8f66e684d244705022f0c747c1c3a3d6b0b373d","sha512":"70746fccd5544ab21506689aede2be78b9a6705abf3b9503936756c2c192978f44578009cf993916abbfd51bdfc3ee62ec6a3cee7a74184948312b2ade86edad","ssdeep":"3072:l+ukt8uBDACNgnEuIoFVXbT7VIpqd2q8z:liDpNgnEXilhIpqdZ8z","tlshash":"8df30aec31beb5666ba346b500af1507733d29171c4c4860b121fdea67b940a90bbfed","first_seen":"2025-06-16T17:14:29.819548Z","last_seen":"2026-06-05T20:56:19.719219Z","times_seen":8,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":90,"dns":33,"connect":6,"send":0,"wait":144,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.mbidadm.com/static/scripts.js","fqdn":"js.mbidadm.com","domain":"mbidadm.com","tld":"com"},"ip":{"addr":"45.133.44.53","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:44.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"js.mbidadm.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 12:32:00 GMT","end":"Mon, 09 Mar 2026 12:31:59 GMT"},"fingerprint":{"sha1":"66:FA:F3:91:37:32:F3:4B:C9:9C:68:A4:AC:61:89:CD:46:74:58:D8","sha256":"10:76:05:A2:22:84:01:63:E6:15:AD:DF:34:09:CC:3B:FE:46:AD:5B:97:B0:8D:55:0D:CB:33:F1:9F:38:2B:B5"}}},"request":{"raw":"GET /static/scripts.js HTTP/1.1\r\nHost: js.mbidadm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx/1.18.0\r\nlast-modified: Wed, 24 Dec 2025 08:35:26 GMT\r\netag: W/\"694ba5ce-2410f\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 29 Dec 2025 11:38:44 GMT\r\ncache-control: max-age=300\r\nx-cdn-host-id: AH1742\r\nx-proxy-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147727,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"45bf2279ae2968e0b223b01b47477328","sha1":"ac4292a0011d1e66cbbd2bbfba05998354f36a06","sha256":"68ecc71625e9a26e79277af11c848a4c48246245247c5aaad21026bd18f597f9","sha512":"fda5194f026a4268c3335d38f5cba8728449c2f5b55492a4522eb7eb7b18afcfa9fd443936518cf5b5cc4cb62d5b8bcc6dcef7e647266d52297df8b103bf2c8e","ssdeep":"1536:O8d+dnC5OPJdWo9aKRcZJotK8sBgpblO12FoX50FtQySd1uj6bzKNRKf7lbg0etc:jAHGJotqYXqd1uObGrK5E0etsz","tlshash":"0de33ad8b2d2b07407e75099d83f1206b73a1a16780c9068f6a5e9c17878ddb523bf7e","first_seen":"2025-12-24T08:41:20.200071Z","last_seen":"2026-01-15T06:19:14.842063Z","times_seen":109,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":123,"dns":63,"connect":22,"send":0,"wait":54,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tonkeeper.com/assets/tonconnect-icon.png","fqdn":"tonkeeper.com","domain":"tonkeeper.com","tld":"com"},"ip":{"addr":"104.26.2.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tonkeeper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 03:06:42 GMT","end":"Sun, 22 Mar 2026 04:06:40 GMT"},"fingerprint":{"sha1":"6F:5E:05:B0:3F:D2:A3:BB:5F:F7:E1:50:6A:A3:09:84:29:D5:DF:06","sha256":"27:35:CA:1C:42:9B:2D:84:ED:BE:76:11:1E:8F:77:BF:BB:EF:BA:F3:21:DF:CA:0E:9C:47:8D:52:B8:90:7D:4A"}}},"request":{"raw":"GET /assets/tonconnect-icon.png HTTP/1.1\r\nHost: tonkeeper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 1284\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"fdb53285ee469cb1c827e9dc50218e17\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=moKsLzX%2BgxIo8XPKvuDITJ9dLW3e8pGuellJZ1TMDrA6imVQcWHcd7AXQVHjw%2B38JaJCuXusuIcZx%2BYMvhNBNBrasj%2FuL7uMdy4O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncf-ray: 9b58fc027a423181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1284,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"cba93fd4ef01e8b6a839f321b198e6ef","sha1":"cd425ede89e3ced40f919bd9bf2867153f528e68","sha256":"b7e60fdb63fa58ac414061aec15fbe1db8d0c822fce3c379d90004ebec3fb1e9","sha512":"57223145df0dbe2ac141e408851155593552c1ae82880721326c21a633b263b8235c76afb910d91cf2fcae4ceda09c72693bbe68d88bbc394bb76aedcd9a74a0","ssdeep":"","tlshash":"ae218a03c579e3175e9b15b2552a1fc35c93a8b00dc6158fec459dcd5649c8bc71128b","first_seen":"2025-04-26T05:32:18.028477Z","last_seen":"2026-08-04T09:02:27.289037Z","times_seen":992,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":36,"connect":15,"send":0,"wait":33,"receive":0,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=309919","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 11:47:47 GMT","end":"Sun, 08 Feb 2026 11:47:46 GMT"},"fingerprint":{"sha1":"05:1E:63:2F:40:1F:87:C3:0D:F0:42:C7:EA:E8:B1:D8:6F:76:7C:FC","sha256":"1C:13:0E:F6:58:8A:8C:D7:DE:1F:9F:20:D5:17:50:15:02:D5:C8:8E:39:40:68:3F:01:24:F2:73:14:BA:25:0F"}}},"request":{"raw":"OPTIONS /fp?tag_id=309919 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://telegram.auto-crypto.click/\r\nOrigin: https://telegram.auto-crypto.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.20.1\r\nDate: Mon, 29 Dec 2025 11:33:45 GMT\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nAccess-Control-Allow-Origin: https://telegram.auto-crypto.click\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T13:30:23.689695Z","times_seen":17708716,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":52,"receive":0,"ssl":139},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-28","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/delab-team/manifests-images/main/WalletAvatar.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /delab-team/manifests-images/main/WalletAvatar.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"8dbb8cf969074110c12c47e9e303ff0e0ce7e7f65699b681d502c8cb9ec6f330\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: D36B:3D793:501C48:5A2EC2:6949E18E\r\naccept-ranges: bytes\r\ndate: Mon, 29 Dec 2025 11:33:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: HIT\r\nx-cache-hits: 2\r\nx-timer: S1767008026.941150,VS0,VE0\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 5b9ab405acfd31840069658a72a60c9805073980\r\nexpires: Mon, 29 Dec 2025 11:38:45 GMT\r\nsource-age: 26\r\ncontent-length: 125350\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":125350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit grayscale, non-interlaced","md5":"76785cabe454661186dde236a5e887be","sha1":"037a3fdb5a329176006e067a17047146157568cf","sha256":"3f7399ef75d19d2278cfe2b9a7bc1fb8d396de9f28806f60e730f1734a2fa015","sha512":"2607fd9ddbea4a129920a047de7b9000bdbb407dc42e965811c0b329e785bf4f15bc46e2e083de823393311edf1a17f09eb4fc69ef99d2f98921d92c69717f7f","ssdeep":"3072:iM1uQX3BaDEhqwF4zkUDGxdeac82lyg5iv16yXYRHK:qG3wwq2kGXeac82wg5mFMHK","tlshash":"94c31292da37fbd1f6741640f125ba6a4533427a0507a39f8a6f82ed508878f29f1dc3","first_seen":"2024-12-14T03:28:29.072761Z","last_seen":"2026-07-27T15:10:52.87242Z","times_seen":650,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":48,"dns":9,"connect":0,"send":0,"wait":65,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.pvcliping.com/web/public_image/SafePal_x288.png","fqdn":"s.pvcliping.com","domain":"pvcliping.com","tld":"com"},"ip":{"addr":"154.41.93.241","port":443,"asn":174,"as":"COGENT-174","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.pvcliping.com","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 08 Oct 2025 00:00:00 GMT","end":"Mon, 05 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:4C:A5:11:FC:D8:61:5A:D5:B5:B2:E8:EB:FC:85:66:3D:6E:B5:38","sha256":"44:FA:E0:29:37:2E:FD:D6:BD:6A:79:3E:87:72:A7:1A:92:29:E7:84:3A:20:41:D7:A4:D0:CC:FD:07:53:FF:4D"}}},"request":{"raw":"GET /web/public_image/SafePal_x288.png HTTP/1.1\r\nHost: s.pvcliping.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 735\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Log, X-Reqid\r\naccess-control-max-age: 2592000\r\nage: 289985\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"SafePal_x288.png\"; filename*=utf-8''SafePal_x288.png\r\ncontent-md5: BThjT5VNh31e1jO3BPxHXQ==\r\ncontent-transfer-encoding: binary\r\netag: \"FpfPjmaer6Bl2WSld8f1ivFddVWs\"\r\nlast-modified: Thu, 15 Dec 2022 09:28:55 GMT\r\nx-log: X-Log\r\nx-m-log: QNM:wldsg119;QNM3:1\r\nx-m-reqid: vXpeqxEwT\r\nx-qiniu-zone: na0\r\nx-qnm-cache: Hit\r\nx-reqid: O_IAAADc1BU8ZE0Y\r\nx-svr: IO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":735,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 4-bit colormap, non-interlaced","md5":"0538634f954d877d5ed633b704fc475d","sha1":"97cf8e669eafa065d964a577c7f58af15d7555ac","sha256":"2173dbf44e5b986d15cb52b206af9e85e2dcc4808aebd6f7f29fdb5949f5fa4a","sha512":"a8d4a748977b04a6e5e2a6cc205822a9286cd2c0c8d0330d83bb8ea7debe5e8460d2a62910c9be688b67e1c33444d31c111022993b3b91ebebb2c51b3d6af696","ssdeep":"","tlshash":"430160f4cece0801853f8c215418a4c8e940c28fa06ac7330db4cc1a61c9c90a93f512","first_seen":"2024-06-30T12:44:46Z","last_seen":"2026-08-04T09:02:27.289874Z","times_seen":1073,"resource_available":false,"data":null}},"time_used":1257,"timings":{"blocked":37,"dns":127,"connect":255,"send":0,"wait":257,"receive":0,"ssl":569},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtonwallet.com/assets/img/icon-256-back.png","fqdn":"xtonwallet.com","domain":"xtonwallet.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtonwallet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 19:00:14 GMT","end":"Thu, 26 Mar 2026 19:58:53 GMT"},"fingerprint":{"sha1":"F8:64:0E:DF:01:BE:6B:5D:83:85:F1:5C:71:1F:F4:7A:96:18:81:69","sha256":"32:B5:6C:04:7B:F4:00:4A:71:E6:9E:0A:24:31:12:CF:9B:0B:7C:E3:91:86:49:A8:6A:1E:67:C7:25:75:78:EE"}}},"request":{"raw":"GET /assets/img/icon-256-back.png HTTP/1.1\r\nHost: xtonwallet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 7747\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Apr 2023 15:34:09 GMT\r\naccess-control-allow-origin: *\r\netag: \"643037f1-1e43\"\r\nexpires: Wed, 24 Dec 2025 01:56:01 GMT\r\ncache-control: max-age=14400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 665D:1D2CFD:69DFB:7B063:6850C1BD\r\naccept-ranges: bytes\r\nvia: 1.1 varnish\r\nage: 500\r\nx-served-by: cache-bma-essb1270038-BMA\r\nx-cache: HIT\r\nx-cache-hits: 18294\r\nx-timer: S1751602966.363950,VS0,VE0\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 130040d79a6c3402511b91296471aba3370f4b2c\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ir5rIIGAQtNQ%2FKAdBtINU5r0mkcdLqyZ9HeV6a27SyJUK%2F9WU5Q0ZPkV6lBqUnTh1AjWyrnbuqBFAvaj5SWY8YgyIUPH%2FJmfvigiyH0t\"}]}\r\ncf-ray: 9b58fc0378598be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7747,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"0983df3ca4f09d3d163cc00073d732da","sha1":"eae458b0b90c8b7c54fa7ee30a19262b4f6d322b","sha256":"ace8dd194c4e421b91d44669bab890974dc28265a1196dd41c48c70abe8debc0","sha512":"7dc6ce1455e78d1bfd4e749b8735e63add6d245a19b7f8010e13c643ac12f24f68545a6f615251a9fc85badfb7f1037b10fa133013141adfc4f91155f5e2cec5","ssdeep":"192:DHdDBqucOLMlzA79aKMgII+yIj34a7eDJCl9XMpgusjCMf7:VBq7OoNcn0wVa7eDJCl9XM/TW","tlshash":"10f16c34e467c40dda947244d6b305d47ed390118f97dbef5e6c5b2a2b888e38e82663","first_seen":"2024-04-21T23:23:36Z","last_seen":"2026-07-27T15:10:52.889413Z","times_seen":687,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":79,"dns":14,"connect":9,"send":0,"wait":38,"receive":1,"ssl":156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ebn.telemetree.io/public-api/v1/client/config?project=32017270-0e91-44c7-8b2f-44b7f809a10b","fqdn":"ebn.telemetree.io","domain":"telemetree.io","tld":"io"},"ip":{"addr":"142.250.178.83","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:46.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ebn.telemetree.io","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 05:23:52 GMT","end":"Thu, 12 Mar 2026 06:12:01 GMT"},"fingerprint":{"sha1":"53:24:72:E7:CA:B8:26:95:80:A9:01:B0:9A:7B:17:F6:3D:86:31:F7","sha256":"2B:3A:5B:7D:76:C7:F6:C4:EB:D9:05:03:4E:54:C7:51:06:F3:00:90:BE:CE:3D:FD:28:CE:0D:48:43:DE:93:E6"}}},"request":{"raw":"OPTIONS /public-api/v1/client/config?project=32017270-0e91-44c7-8b2f-44b7f809a10b HTTP/1.1\r\nHost: ebn.telemetree.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://telegram.auto-crypto.click/\r\nOrigin: https://telegram.auto-crypto.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:50 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\nserver: uvicorn\r\nvary: Origin\r\naccess-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 600\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://telegram.auto-crypto.click\r\naccess-control-allow-headers: authorization\r\nvia: 1.1 google\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-08-04T13:34:49.479127Z","times_seen":359375,"resource_available":true,"data":null}},"time_used":5217,"timings":{"blocked":328,"dns":51,"connect":21,"send":0,"wait":4537,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.auto-crypto.click/assets/Unauthorized-CGqiiMyK.js","fqdn":"telegram.auto-crypto.click","domain":"auto-crypto.click","tld":"click"},"ip":{"addr":"45.148.28.36","port":443,"asn":44803,"as":"Webdock.io ApS","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegram.auto-crypto.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 15:35:38 GMT","end":"Thu, 19 Feb 2026 15:35:37 GMT"},"fingerprint":{"sha1":"61:0D:0B:35:4B:87:C7:03:CC:69:A2:7D:66:36:C7:FF:D1:20:65:8D","sha256":"5E:7C:E0:53:4B:73:53:04:B7:39:FA:80:5E:A7:F2:4A:C5:1A:DB:19:CA:9D:00:DC:D6:A0:60:E6:30:2A:8E:29"}}},"request":{"raw":"GET /assets/Unauthorized-CGqiiMyK.js HTTP/1.1\r\nHost: telegram.auto-crypto.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/assets/index-BhSMCli2.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Mon, 29 Dec 2025 11:33:45 GMT\r\netag: W/\"7fb-19a8771c53b\"\r\nlast-modified: Sat, 15 Nov 2025 12:16:11 GMT\r\nx-powered-by: Express\r\ncontent-length: 2043\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2043,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2042)","md5":"d96308bb14970f86484e034830b903b7","sha1":"891a92ab1367e494495b4982d6ec9f8f7e744743","sha256":"02646291555bd35c2082d5d1479c8a25d91fbb3dace72fa2d0a55d45361affa5","sha512":"dc65e47e30772f4666d96e70536a43a2325c03449a735817fab2293de800beb8466fe55a9baf0e9b3c8248ca8f36d54802accfbfd62ac8d79d3cb9705ff370d8","ssdeep":"","tlshash":"4341858ed642c7f5750a407db4943c19b0909ae8aba1dd4ae7fa0321a4d48f5e44d2fc","first_seen":"2025-12-29T11:34:22.734145Z","last_seen":"2025-12-29T11:34:22.734145Z","times_seen":1,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"telegram.auto-crypto.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/hot-dao/media/main/logo.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /hot-dao/media/main/logo.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"1de198e102f5ad105bd6b35fdbcc11433afb16c250a55372b26bd0d56ee7d629\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 3938:1DA2B5:23BADB:2B527A:694230E1\r\naccept-ranges: bytes\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: HIT\r\nx-cache-hits: 13\r\nx-timer: S1767008026.044701,VS0,VE0\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 35385ef2e149afc971d1399746216865f30e1ac8\r\nexpires: Mon, 29 Dec 2025 11:38:46 GMT\r\nsource-age: 277\r\ncontent-length: 54702\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":54702,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"a127d8a6a542f1a60214ad74673a47a9","sha1":"5979dfa3ced667400d5269b14962f316d9783353","sha256":"102a1096653e51db8911e8bc6250d50871e237429d977267cb265870332c99f9","sha512":"0521b5924984dbb1b318dcdb722feb9e5d569cf50315c3bbb14977659e421ac43baf402d2123efcfade09b88bc5251a3eebb0db5bf20c8848110bb8d7b77a04a","ssdeep":"1536:KsKssThL7syFw6VqKiHFOSkUn8TjkV2cur4Q3AI:KtsslL7sshiHFO5fTjkV2cukQ3AI","tlshash":"e93301d6195349becd3119ead03f0a1cd5981bc2183a6797d8cc34ceeb8229573deda8","first_seen":"2024-08-22T02:48:25Z","last_seen":"2026-07-27T15:10:52.887435Z","times_seen":660,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":4,"connect":19,"send":0,"wait":66,"receive":2,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chain-cdn.uxuy.com/logo/square_288.png","fqdn":"chain-cdn.uxuy.com","domain":"uxuy.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chain-cdn.uxuy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 08:44:08 GMT","end":"Mon, 23 Feb 2026 09:44:04 GMT"},"fingerprint":{"sha1":"B4:91:87:D6:D9:BD:00:98:A2:30:AD:96:36:57:5A:50:86:0C:31:C8","sha256":"38:82:63:62:49:15:30:48:C6:71:CA:94:CA:47:FF:B4:84:73:67:13:89:DC:36:12:93:02:71:D8:82:74:2A:49"}}},"request":{"raw":"GET /logo/square_288.png HTTP/1.1\r\nHost: chain-cdn.uxuy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 4466\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"65f2bd95e6bb494154a355ceec6578cf\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RsyG6%2F%2B0PgKFUrXkaGg6tAeTSkV8GlkGSSCp%2BR7wHnIcqi3xiBu0i6X%2B7nRVqYHYE6DlPT0zncvCnTCiOcWWHS11gO70b9qs6uZWUKJ3pxE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b58fc03df010b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4466,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"3f164d7d6869bdafc9f9b88d1965902a","sha1":"9a779050cdf592984eaa1da7c683ad369fe2e816","sha256":"adcbb7d04c8c486f6735533b3df263f44ffbe2733cc7d2375dadef30b5ee0b11","sha512":"fc89c275d3cba75e73ecc49a9d86c22d4bb9bb8dcc2745d9eafe931f065ea8fc553b076dd6edee045cd82b4e2b659d6f28d310d3620af03190a535aea28446d5","ssdeep":"96:wSU6TBq/rd/sSEW87dyRGBBnmvTdoRg9oAl3Sj4Ex7eD+Tm5A8hJb:wShTBMK/nmJokoEou","tlshash":"5d911a4623a50cb3f44b908e76417c8c437265a3674c3fce07899122fee61b1d6ab369","first_seen":"2025-04-19T14:12:50.869757Z","last_seen":"2026-07-27T15:10:52.881658Z","times_seen":567,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":130,"dns":9,"connect":32,"send":0,"wait":21,"receive":0,"ssl":163},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/in/multy","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:46.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"POST /in/multy HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 2141\r\nOrigin: https://telegram.auto-crypto.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2141,"data":"{\"imp\":[{\"ext\":{\"utm1\":\"\",\"utm2\":\"\",\"utm4\":\"\",\"refdomain\":\"\",\"labels\":\"\",\"tcid\":0,\"site\":\"native-push\",\"screen_resolution\":\"1280x1024\",\"ve\":\"\",\"mo\":\"\",\"format\":\"default-view-b_r-body\",\"idzone\":0,\"testab\":0,\"timezone_olson\":\"UTC\",\"blocked_verticals\":\"4,5,6,7,8,9,46,47,54,55,61,110,119,136,137,10,11,12,13,29,31,34,93,106,107,145,146,148\",\"after_video\":0,\"tu\":1,\"mm\":0,\"skins\":null,\"st\":0.02,\"spot_id\":2007633,\"timezone\":0,\"subid\":\"1690053286\",\"wl\":0,\"event_id\":\"439ab764-6de7-4e29-bbae-f0782794926f\",\"sid\":2061318680,\"created_at\":\"2025-12-29\",\"ver\":\"8.244.2\",\"is_native\":1,\"device_theme\":\"light\",\"ad_tags\":\"Ton%2CGiveaway\",\"user_keywords\":\"\",\"v2_track\":0,\"default_keywords\":\"\",\"tag_ab\":\"b\",\"suggestive\":0,\"v2\":0,\"features\":\"is_tma\",\"yfriendly_always\":false,\"is_iframe\":false,\"approved_mainstream\":0,\"default\":1},\"pext\":{\"ab\":0},\"metrics\":{\"topics\":[],\"prev_step_diff\":1138}}],\"site\":{\"id\":\"2007633\",\"cat\":[\"IAB13-7\"],\"page\":\"https%3A//telegram.auto-crypto.click/unauthorized\",\"is_publisher\":true,\"ct\":1,\"ctid\":3,\"script_type\":\"general\",\"auc_domain_type\":\"basic\"},\"ext\":{\"dt\":1767008026202},\"user\":{\"fp\":0,\"fp_str\":\"\",\"ua_data\":null,\"events\":[],\"interest_ids\":[],\"click_status\":\"unknown\",\"keywords_history\":{\"keywords\":[{\"keyword\":\"cryptocurrency\",\"counter\":1}],\"pages_count\":1},\"is_webview\":false,\"is_inapp\":false,\"telegram\":{\"user_id\":0,\"username\":\"\",\"is_premium\":false,\"color_scheme\":\"light\",\"wallet_address\":\"\",\"wallet_balance\":\"\"},\"social_network\":\"\",\"audiences_ids\":[]},\"device\":{\"w\":1280,\"h\":1024},\"fp_params\":{\"plugins\":[\"PDF Viewer\",\"Chrome PDF Viewer\",\"Chromium PDF Viewer\",\"Microsoft Edge PDF Viewer\",\"WebKit built-in PDF\"],\"languages\":[\"en-US\",\"en\"],\"fonts\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"fontPreferences\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"platform\":\"Win32\",\"colorDepth\":24,\"deviceMemory\":0,\"hardwareConcurrency\":48,\"indexedDB\":true,\"sessionStorage\":true,\"localStorage\":true,\"cookiesEnabled\":true,\"colorGamut\":\"srgb\"},\"cached_mislead_offer\":{\"track_click_url\":\"\"}}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.20.1\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T13:30:23.689695Z","times_seen":17708716,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.auto-crypto.click/","fqdn":"telegram.auto-crypto.click","domain":"auto-crypto.click","tld":"click"},"ip":{"addr":"45.148.28.36","port":443,"asn":44803,"as":"Webdock.io ApS","country":"Denmark","country_code":"DK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-29T11:33:42.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegram.auto-crypto.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 15:35:38 GMT","end":"Thu, 19 Feb 2026 15:35:37 GMT"},"fingerprint":{"sha1":"61:0D:0B:35:4B:87:C7:03:CC:69:A2:7D:66:36:C7:FF:D1:20:65:8D","sha256":"5E:7C:E0:53:4B:73:53:04:B7:39:FA:80:5E:A7:F2:4A:C5:1A:DB:19:CA:9D:00:DC:D6:A0:60:E6:30:2A:8E:29"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: telegram.auto-crypto.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 29 Dec 2025 11:33:42 GMT\r\netag: W/\"1b6-19a8771c53b\"\r\nlast-modified: Sat, 15 Nov 2025 12:16:11 GMT\r\nx-powered-by: Express\r\ncontent-length: 438\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":438,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"77da85180d2e0cface9051b15e78f228","sha1":"6d4b9d69e0481bb285b8462bb40a570ee9d86245","sha256":"8b4e8171f8356430914dd6c7b7de0f47fa948bbf9360377c961f04b48183789a","sha512":"3b014ee627f7a159928674f3119dcd7f5442d850f86349cdb1b71192e5a041ffb7d2f828d5e0a7d9e33c607c48c9039c9202bf331d991c8becbdfa5f6d8450f6","ssdeep":"","tlshash":"05f0a34198a0c815533053046dc0f404ed82db87874d5d4470f750bd4f847858edf478","first_seen":"2025-12-29T11:34:22.735858Z","last_seen":"2025-12-29T11:34:22.735858Z","times_seen":1,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":172,"dns":55,"connect":44,"send":0,"wait":49,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"telegram.auto-crypto.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"richinfo.co/richpartners/telegram/js/tg-ob.js","fqdn":"richinfo.co","domain":"richinfo.co","tld":"co"},"ip":{"addr":"109.200.199.111","port":443,"asn":49544,"as":"i3D.net B.V","country":"Italy","country_code":"IT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:44.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"richinfo.co","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Nov 2025 13:10:55 GMT","end":"Fri, 27 Feb 2026 13:10:54 GMT"},"fingerprint":{"sha1":"3E:6B:F9:94:9F:96:AF:5D:AE:1C:1D:E5:84:24:7C:70:E1:0B:5E:80","sha256":"BE:46:30:1E:8F:4E:3E:76:18:F2:0D:4D:A1:92:96:51:D1:C6:43:E9:4E:C5:09:58:05:BD:65:7B:97:B7:7C:C6"}}},"request":{"raw":"GET /richpartners/telegram/js/tg-ob.js HTTP/1.1\r\nHost: richinfo.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.21.4.1\r\ndate: Mon, 29 Dec 2025 11:33:44 GMT\r\ncontent-type: application/x-javascript\r\nx-amz-id-2: p7TlMwhy2WyA56K+ZP6PkRLMI/wtEfDcz7ucNmesE42GJjQi/i1xXdEgabx+ftdM4p9Qopt7JIc=\r\nx-amz-request-id: VXTHFYXXSXHSPJEM\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 18 Dec 2025 09:22:16 GMT\r\netag: W/\"12a78f58864cade5d164beccd3b3f617\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: uBina2AyjjaZNB6PvvyjXqG1bqIuJlnT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.21.4.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":253126,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"12a78f58864cade5d164beccd3b3f617","sha1":"eb1a31d615b0fefb556c05b37859669b88e5a92f","sha256":"187da98abe3e2ae125dd08bf8335c464a42b9afb06f84a264cd6c6b571825529","sha512":"2a1f8964af62bf3c1c4617f31bf6e0fc0c0f477666800dd3700bb37fccbc25cbcc5032b4f565edf778a00e4d075312e98135b1d1b8f7dbfece0215eb602e0c74","ssdeep":"6144:HTXnvYVp1BEe+KpaeIG8zgRHrJ5N5nkfvicNKKOVWCYuOtKduXn:HTfYBSE8eIG8UtVnK6ckKrn","tlshash":"0a3470812bc1fc9d13874b763336a5e6e5298f99a4890b8af054fc54f09e913faec570","first_seen":"2025-12-04T11:23:29.55944Z","last_seen":"2026-02-06T21:49:19.086855Z","times_seen":7,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":37,"connect":49,"send":0,"wait":86,"receive":0,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mbdippex.com/keywords","fqdn":"mbdippex.com","domain":"mbdippex.com","tld":"com"},"ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"OPTIONS /keywords HTTP/1.1\r\nHost: mbdippex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://telegram.auto-crypto.click/\r\nOrigin: https://telegram.auto-crypto.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.20.1\r\ndate: Mon, 29 Dec 2025 11:33:45 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T13:30:23.689695Z","times_seen":17708716,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":78,"dns":26,"connect":25,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tonkeeper.com/assets/tonconnect-icon-pro.png","fqdn":"tonkeeper.com","domain":"tonkeeper.com","tld":"com"},"ip":{"addr":"104.26.2.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tonkeeper.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Dec 2025 03:06:42 GMT","end":"Sun, 22 Mar 2026 04:06:40 GMT"},"fingerprint":{"sha1":"6F:5E:05:B0:3F:D2:A3:BB:5F:F7:E1:50:6A:A3:09:84:29:D5:DF:06","sha256":"27:35:CA:1C:42:9B:2D:84:ED:BE:76:11:1E:8F:77:BF:BB:EF:BA:F3:21:DF:CA:0E:9C:47:8D:52:B8:90:7D:4A"}}},"request":{"raw":"GET /assets/tonconnect-icon-pro.png HTTP/1.1\r\nHost: tonkeeper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 18520\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"c972e965e2e93196f9d452cd8cab4385\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BRuRMxzozg0bcfzeoxdkAW%2FyY7740FSQMA%2B1PQy9sQ0%2F6yaPeecD8cgb03lrNHhEXnPbJDUU%2BMRqoMursfq0JWPv7AvL9yp1fcnr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncf-ray: 9b58fc027a443181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18520,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"3c952c0c19268d9ede72dba2b327d99c","sha1":"1b1e98ee3538963e3dc9089746386d6acf397e80","sha256":"2d0ab9711dbced8b88b2f207a139e623641ddb8c40e375cfa888016d32aa01ca","sha512":"e3bd01ffedf9d33530a5e5246cee26f8a54e17423861d6b595952024e9c6baecac67fa4d7f1250103cc46ae83428c82403cdff7751a665c760e01ab50b551af4","ssdeep":"192:uiYxYUIKZ50p++PRy145vrPXZNAvccFB6B6EfkpFcLYp29BTW8q2dqojHOX9k9uL:u9EKMn4SjXrA0cYjLYStPHMw/NfIBN/","tlshash":"af82d01622a3994d2f79a9f8ee25fa38344102dd5fdab8d9cdd6c0ce184ca64e533c61","first_seen":"2025-05-19T03:10:12.400525Z","last_seen":"2026-08-04T09:02:27.232084Z","times_seen":959,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":20,"connect":12,"send":0,"wait":23,"receive":1,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aws-v2-cdn.token.im/orbit/token-v2/icons/logo-ton-connect.png","fqdn":"aws-v2-cdn.token.im","domain":"token.im","tld":"im"},"ip":{"addr":"34.120.113.83","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.token.im","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Fri, 06 Jun 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CD:6A:97:52:4E:A8:46:CE:4F:1D:42:72:6D:C1:19:46:04:DD:E7:0E","sha256":"54:95:F0:AB:F3:83:AB:3A:88:D5:EA:82:AD:9E:2E:8B:05:68:CD:B5:B7:F3:38:F0:F9:18:27:39:5D:38:08:1C"}}},"request":{"raw":"GET /orbit/token-v2/icons/logo-ton-connect.png HTTP/1.1\r\nHost: aws-v2-cdn.token.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: marco/3.2\r\ncontent-length: 56700\r\nx-source: U/200\r\nx-upyun-content-length: 56700\r\nx-upyun-content-type: image/png\r\nx-request-id: 8633619923112b96e26b87ca2e7a064c\r\naccept-ranges: bytes\r\nvia: T.186.H, M.gtt-us-lax-186, 1.1 google\r\ndate: Mon, 29 Dec 2025 11:29:03 GMT\r\nage: 283\r\nlast-modified: Thu, 14 Aug 2025 09:06:22 GMT\r\netag: \"59fa147833db623b2523158ce125c1a3\"\r\ncontent-type: image/png\r\ncache-control: public,must-revalidate,max-age=300\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56700,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"59fa147833db623b2523158ce125c1a3","sha1":"0f98df73ab34605ce801341b471f07c303c81d7c","sha256":"f1c39cc2800e2a46592367c941670bb2bf996b87fddcd1e96078d36a53472a4a","sha512":"00238f85cc209c1e35bf41ba05e45d13095bd185e55b11768e5ef053783b875ad9514e607c6d00305440981f2d2af047bb3bd68e51d2dae29de7f6d28bcbb53b","ssdeep":"1536:kEUmqi8/tyM+xaPvSdhp5Q0e8lwMve12GNNTBOmrHHUfWphAlVTRDcBip:kEUmC1FuS8lm1jNNTlo6hA3TRFp","tlshash":"2743027a59c75fc0a8ff08b97091374efba938a447a0730627f7278ce15a5b208535ad","first_seen":"2025-08-28T13:15:36.16115Z","last_seen":"2026-07-27T15:10:52.88258Z","times_seen":406,"resource_available":false,"data":null}},"time_used":880,"timings":{"blocked":160,"dns":22,"connect":49,"send":0,"wait":27,"receive":40,"ssl":556},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/bitgetwallet/download/refs/heads/main/logo/png/bitget_wallet_logo_288_mini.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.780Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /bitgetwallet/download/refs/heads/main/logo/png/bitget_wallet_logo_288_mini.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"21792ff74f93cbcc3638c79fdc840caad35cf662774736d4a072349237457db3\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 9973:3D0D21:5740CC:627FAC:6949ECCE\r\naccept-ranges: bytes\r\ndate: Mon, 29 Dec 2025 11:33:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: HIT\r\nx-cache-hits: 13\r\nx-timer: S1767008026.940149,VS0,VE0\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 82cf2fa5c7271f98a3b049a8da3c5c655a95eebe\r\nexpires: Mon, 29 Dec 2025 11:38:45 GMT\r\nsource-age: 277\r\ncontent-length: 2656\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2656,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"c0453148d4a154472838f9795b345ad4","sha1":"a43a21ecba07f3e71ff525c91a1da9a120019d05","sha256":"98e4edb321f929be72c57efb3149f476057255631db59ea3003167c0ab4138c6","sha512":"952c63573241b0a1944760dda12218a3ad7b35eb8a08d29df3a224b08b931dd2fe39bf00d43695e263dd8fbbda17e5bede9b7bfbb0c2cfaa4c25d6b819cfb453","ssdeep":"","tlshash":"9f51e6cfba258ee53c6ac8195c7e9c61c6ceed98784ab344c921b9c2423153c2678d97","first_seen":"2025-05-21T09:31:59.826267Z","last_seen":"2026-07-27T15:10:52.899779Z","times_seen":570,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":4,"connect":35,"send":0,"wait":35,"receive":1,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.auto-crypto.click/favicon.ico","fqdn":"telegram.auto-crypto.click","domain":"auto-crypto.click","tld":"click"},"ip":{"addr":"45.148.28.36","port":443,"asn":44803,"as":"Webdock.io ApS","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:43.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegram.auto-crypto.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 15:35:38 GMT","end":"Thu, 19 Feb 2026 15:35:37 GMT"},"fingerprint":{"sha1":"61:0D:0B:35:4B:87:C7:03:CC:69:A2:7D:66:36:C7:FF:D1:20:65:8D","sha256":"5E:7C:E0:53:4B:73:53:04:B7:39:FA:80:5E:A7:F2:4A:C5:1A:DB:19:CA:9D:00:DC:D6:A0:60:E6:30:2A:8E:29"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: telegram.auto-crypto.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: image/x-icon\r\ndate: Mon, 29 Dec 2025 11:33:43 GMT\r\netag: W/\"4203e-19a8771c2bf\"\r\nlast-modified: Sat, 15 Nov 2025 12:16:10 GMT\r\nx-powered-by: Express\r\ncontent-length: 270398\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":270398,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256, 32 bits/pixel","md5":"f4ac73452fbb539ae9fe1cd2ae89b825","sha1":"85b6b819d29c14e7e7b58b9e194bed17ee3f70f5","sha256":"ea3dc875627a9b94fc48ac0c77df5170416c536d2ab989e5fd32a9f2b7bc3752","sha512":"b1c4cd240249edf22b6f6e07834c0976b0d1d78e537b29080b2ced2a66f458e5131d5de0a8de1b859127cb9263213a1ed6457e97627aeb5ff64f0d54a504ba50","ssdeep":"6144:/P5Z3Ok8N28lVIJlFeJK9190tJxfLVGFzHtDfn/1Fl7wf6ZFC5Y83:/hZX8g+WJlFeJK9190tJxfUN9fn/1Fl0","tlshash":"16443ab226d211cfd6c32f795ae47338d97fd3e8f8e7468221709a6dfa25845af40904","first_seen":"2025-09-04T14:32:16.48642Z","last_seen":"2025-12-29T11:34:22.739102Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"telegram.auto-crypto.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bapi.tads.me/site_details","fqdn":"bapi.tads.me","domain":"tads.me","tld":"me"},"ip":{"addr":"104.21.18.243","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"tads.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 11:20:08 GMT","end":"Mon, 02 Mar 2026 12:17:47 GMT"},"fingerprint":{"sha1":"F1:35:2D:56:D9:09:1A:82:9C:6E:87:60:EF:7F:EE:80:7B:43:41:B3","sha256":"2B:8E:AC:AC:8C:D6:96:C4:DA:D2:E6:06:A0:4B:D2:F1:97:EE:92:A8:0B:FD:9F:AA:05:67:CC:02:70:60:C7:8B"}}},"request":{"raw":"OPTIONS /site_details HTTP/1.1\r\nHost: bapi.tads.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://telegram.auto-crypto.click/\r\nOrigin: https://telegram.auto-crypto.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 29 Dec 2025 11:33:45 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v1EXmuRO%2BO1Ihf%2Fl6L%2FgAJKnXhke3TXLPyHtWYGONdZJNcv8EapOrm2jUp58eciOb459iRVPBczNOUp3erMi2MRYzNCRZqS%2BDSw%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9b58fc008af95699-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T13:30:23.689695Z","times_seen":17708716,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":49,"dns":21,"connect":1,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/Architec-Ton/wallet-tma/refs/heads/dev/public/images/arcwallet_logo.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /Architec-Ton/wallet-tma/refs/heads/dev/public/images/arcwallet_logo.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"053f99db38879d603a0fe0d0c56357478c08b346b9117fc4162eb45be1581936\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 2E26:CFCF:1B2D31:20ED9B:69421F2B\r\naccept-ranges: bytes\r\ndate: Mon, 29 Dec 2025 11:33:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: HIT\r\nx-cache-hits: 13\r\nx-timer: S1767008026.940902,VS0,VE0\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: ba454668a70fe9eb16609948a84233f16f052794\r\nexpires: Mon, 29 Dec 2025 11:38:45 GMT\r\nsource-age: 277\r\ncontent-length: 17680\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17680,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 228 x 228, 8-bit/color RGBA, non-interlaced","md5":"d72b78543d6501845b509dff37c2b146","sha1":"68c7e24c9c5da907c1d725a37cbfe1773aaf69d7","sha256":"22b79bc31a89740924e0e990083ce503cded006ec85a9878f925efbbd3d23c3e","sha512":"e856aa676bbac72cf76d701b47fd9798fb0b76790d994e58f021869abef7c752035d28d4f01e58112b90593686615e889156adb43f9e5ef9591725c61df5c2f4","ssdeep":"192:eYEWkPbfZhkY8WlA82HMVGvl94k4BFtS/j7/IwRhBY8a2TVudW/rYxnHfh+udpEM:2PzZH8Eaf4TsPIwZYByEtH1pxb","tlshash":"9f82d09aa57234e643561da632e86c1ef570180a65748cc73bec1c894ff9e6e08e7242","first_seen":"2025-03-12T23:31:41.113543Z","last_seen":"2026-07-27T15:10:52.890281Z","times_seen":616,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":43,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wallet.ton.org/assets/ui/qr-logo.png","fqdn":"wallet.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"104.26.15.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ton.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 12:52:31 GMT","end":"Mon, 02 Mar 2026 13:52:27 GMT"},"fingerprint":{"sha1":"76:CE:51:92:10:A3:04:96:17:D7:1C:AD:E0:28:FB:A8:D3:43:9A:8B","sha256":"41:B9:F5:55:A2:BC:73:C8:A3:A7:BC:B9:39:C9:ED:4F:D5:AC:7D:A4:FA:4B:AF:00:14:5F:E9:F4:D4:1F:00:F5"}}},"request":{"raw":"GET /assets/ui/qr-logo.png HTTP/1.1\r\nHost: wallet.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 5386\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 01 Sep 2025 14:05:28 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"68b5a828-150a\"\r\nexpires: Mon, 29 Dec 2025 11:35:23 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: B243:AE7B0:758AFE1:773173E:6952651F\r\naccept-ranges: bytes\r\nx-fastly-request-id: 4d0b3344603436c4a4fabf068189523702fbab16\r\nvia: 1.1 varnish\r\nx-served-by: cache-fra-etou8220063-FRA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1767007523.202658,VS0,VE113\r\nvary: Accept-Encoding\r\nage: 502\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K1XPvskHFnOxCtOPts7mneHxll63jLaJgs1VDJ8qTEL6eVEsJ0XcM6IMF7%2FuP%2F3I4jTgACtezqPgt0Xerv%2BzBIdhPqQQwhrcQhsWFRA%3D\"}]}\r\ncf-ray: 9b58fc03bd0976ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":5386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"bd4264d4c32c16d646517faf4462e5be","sha1":"df6493d70355759579c8941728747814ac5f081d","sha256":"6da4766fae3c3ba2cb931c8b3485461fddc96d6244cdc45fdb800e70e0e1a0ec","sha512":"1e63fc6f27b609bf8386333b3a535cc0a08c18594681c6344ea96dda3582ed5bb85f1bbb53f0f7c9d6b7659ec61a14c8da6b13d5f30a556779b2ebb6a39a40ce","ssdeep":"96:HzmLnGewr7Elc/cd0sNz13DX8DxS6fzuenbEdUApFXnEVMNlW75wm+o:HyDyrkbRzJDMDxREbFXgMrAw8","tlshash":"38b18e5f3da8d243ab5c913f455cc44e3201cc857a8c4a1176acc64f606a2628feea1f","first_seen":"2025-03-22T03:47:07.763738Z","last_seen":"2026-08-04T09:02:27.230193Z","times_seen":1015,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":105,"dns":14,"connect":64,"send":0,"wait":11,"receive":1,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"partner.adextra.io/jt/bb01709ff696f4ed9edad90bcd7455e9dfc3b771.js","fqdn":"partner.adextra.io","domain":"adextra.io","tld":"io"},"ip":{"addr":"104.21.87.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:44.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adextra.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:24:52 GMT","end":"Fri, 27 Feb 2026 23:22:34 GMT"},"fingerprint":{"sha1":"A1:74:8C:0A:64:32:67:01:42:4B:D5:F0:6F:91:DD:33:AC:A3:13:97","sha256":"35:AD:12:AA:DE:52:09:3C:5D:21:5A:A4:52:1D:89:3D:CA:C2:9E:F3:E9:5F:0C:AB:8D:59:25:F2:5A:DA:D3:7B"}}},"request":{"raw":"GET /jt/bb01709ff696f4ed9edad90bcd7455e9dfc3b771.js HTTP/1.1\r\nHost: partner.adextra.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=73g%2FqoUH1QccCX5VHFEwUt%2FwVDC6CIeRR%2B0%2B7gPi8NSLro8BNUca0ZByg5X3YLg1tY5ayQnB0%2BZdaGpCzOiLrJ3j8bC%2Bohy3NbqKCuJzDeSNVQ%3D%3D\"}]}\r\ncache-control: public, no-store, no-cache, proxy-revalidate\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9b58fbfb1eeaa41f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"64c33c8fb4d061652944100e519cd6d3","sha1":"e5c627cb7e02bd6c9035b4f65f93470d198d05cd","sha256":"ec076a76f89bd429bb04d2280511796cda5617d7d028b034af8cecabde5c0857","sha512":"56595a9249fd111f4022ec3689847e1f10b40c2a375fcc8bf6536caf11b4f3c32b8896cb3f3aa89a6fdddf8c1190d1f002c1deef41a1e40a8c0b7bea8ae8d03c","ssdeep":"","tlshash":"efe0f1342cb1c23146271407633fc45031d1606f6401f06d2edcc64caf64fce6c54da4","first_seen":"2025-09-04T14:32:16.456108Z","last_seen":"2025-12-29T11:34:22.740934Z","times_seen":2,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":84,"dns":34,"connect":2,"send":0,"wait":80,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:44.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://telegram.auto-crypto.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28244\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Dec 2025 06:52:04 GMT\r\nexpires: Wed, 23 Dec 2026 06:52:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 535301\r\nlast-modified: Wed, 27 Aug 2025 19:19:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28244,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28244, version 1.0","md5":"9d503278216c2225184a236c64e0924b","sha1":"0c24c621374506ce70403a7473b47acd86bbf919","sha256":"2add7d60b1cd2ab84c9967e23d5ec08eb3fc9635c46855b17d59404dec6b410e","sha512":"fa1aca723eb40b6026aa1d21b36ce2573e4164516c9a0b55ff830a434c3954833a06b1df76236b1d682107df1bd3d263ed19cba854c1a6795566a7091749696d","ssdeep":"768:/6zZ6KBVHUlHvwCa0z1sCvODsIBMTKmJ3GG5x4:yzdKvwtszvdNjz4","tlshash":"3cc2e083d14afb33d0afb77adc52d022e9756bccec7e587a97a900398895c1b0644285","first_seen":"2025-09-02T18:36:17.739185Z","last_seen":"2026-08-04T12:53:22.105119Z","times_seen":13277,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":237,"dns":3,"connect":15,"send":0,"wait":32,"receive":13,"ssl":213},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.gatedataimg.com/prd-ordinal-imgs/036f07bb8730716e/gateio-0925.png","fqdn":"img.gatedataimg.com","domain":"gatedataimg.com","tld":"com"},"ip":{"addr":"52.84.50.32","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gatedataimg.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 20 Feb 2025 00:00:00 GMT","end":"Sat, 21 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AB:91:5C:72:CA:87:6F:97:B4:CF:F1:84:02:48:35:8A:A6:83:BD:18","sha256":"7E:4A:BE:CD:31:B5:80:CB:C0:6F:4E:62:0A:05:3F:DA:DC:78:9E:B0:A5:2A:D7:4B:E5:5D:07:DD:92:BA:91:9C"}}},"request":{"raw":"GET /prd-ordinal-imgs/036f07bb8730716e/gateio-0925.png HTTP/1.1\r\nHost: img.gatedataimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 8030\r\nlast-modified: Wed, 25 Sep 2024 03:59:03 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 29 Dec 2025 02:32:12 GMT\r\netag: \"f97807ae7ba8f30ccf818e0a427a0f3c\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 6a7eeeb375db56eafe74d447721ccbb8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: iF3arH9piAzZx9vjc-tajVLFnprRbigwN0cZZczt5j2QNhLplpmV2A==\r\nage: 32516\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":8030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"f97807ae7ba8f30ccf818e0a427a0f3c","sha1":"f27822f62c669f0cc0c8ce0dc75936bb59d72c64","sha256":"8c2e6fc90600c3ab7c3d1c974a33113b08715852ec04de8d244a35a884a1261d","sha512":"85b38689a484a831975b3b06548c6e3bdb65f03ac1bdc17fe5b02a572c906dee3c98171369523fb62ad00373b4ceea46b7227c23c73119aa59e22950ae22fa75","ssdeep":"192:wS+8nMurZ7v0Z2j3IFQVHvtAmnbVQE+y5hX1Mkdoavj6bNX75QQW:XCurZwu3IlmOE+cOQjWr5QQW","tlshash":"f5f1d0c2c4665c8d3aa5485fbf634321b9837b37588fafdda881246d1080780b30f345","first_seen":"2024-10-08T20:51:52Z","last_seen":"2026-07-27T15:10:52.90396Z","times_seen":653,"resource_available":false,"data":null}},"time_used":797,"timings":{"blocked":52,"dns":8,"connect":16,"send":0,"wait":7,"receive":1,"ssl":707},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blitzwallet.cfd/wallet/public/logo.png","fqdn":"blitzwallet.cfd","domain":"blitzwallet.cfd","tld":"cfd"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"blitzwallet.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 23:01:11 GMT","end":"Wed, 25 Mar 2026 23:45:51 GMT"},"fingerprint":{"sha1":"86:11:BC:78:03:38:3F:C6:CB:D8:A0:A9:4F:6F:7E:49:CF:EE:E7:ED","sha256":"EA:52:58:91:A5:23:B1:23:2F:DC:58:19:17:21:DB:7C:E6:E7:96:E9:2E:84:97:E1:A6:42:88:CF:A2:67:1E:6A"}}},"request":{"raw":"GET /wallet/public/logo.png HTTP/1.1\r\nHost: blitzwallet.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 5271\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\netag: \"dbltgmhk9wkf42f\"\r\nlast-modified: Sat, 26 Jul 2025 07:42:46 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nage: 985\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WO7f%2BqfRUeYCyXqRLPyWA2nNx02iz0KtTesv2%2FoNqigVp6i2nEl62VKrMbS0D5ygxyUW4%2B7Cs1vu1%2BJZkKsZdB2%2B%2FYm7UTQy%2Fxj3No33og%3D%3D\"}]}\r\ncf-ray: 9b58fc03ea510daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5271,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"c3ea8a97370ed78673ed9e9e01abf983","sha1":"09e9b92c59549f327b6b15c6591660ffd2f1dc21","sha256":"89a7fa844c0edb958271f6cb744f3bc62fe50be26535aeb65349f5aacdb00483","sha512":"fb8237b876c92283ff5f604f75534abb7352a4554af2a87e6df8f48dd77b4feee4f26b2079719b7e8bdb70f860a4e8c08b7f8a9334ecdb9f30c7b106fb79f7ba","ssdeep":"96:FSAIGA/VLHjgakQqiSn3e7BrbPN0skDV5pqHMD4Yn0kvOWrrLIveYz6A:FSAlANLRqit9rDNrW8O0kvBXWj","tlshash":"eeb19e56e3ba8716c612f3b605d67e8e92920d88ab7e14e246643b3f440efdec48d605","first_seen":"2025-07-30T05:48:45.447156Z","last_seen":"2026-03-08T22:52:16.422066Z","times_seen":353,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":156,"dns":4,"connect":41,"send":0,"wait":5,"receive":0,"ssl":147},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"blitzwallet.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nereserv.com/in/dip?site=native-push\u0026wl=0\u0026event_id=439ab764-6de7-4e29-bbae-f0782794926f\u0026subid=1690053286\u0026sid=2061318680\u0026spot_id=2007633\u0026created_at=2025-12-29\u0026timezone=0\u0026ver=8.244.2\u0026is_native=1","fqdn":"nereserv.com","domain":"nereserv.com","tld":"com"},"ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:46.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"GET /in/dip?site=native-push\u0026wl=0\u0026event_id=439ab764-6de7-4e29-bbae-f0782794926f\u0026subid=1690053286\u0026sid=2061318680\u0026spot_id=2007633\u0026created_at=2025-12-29\u0026timezone=0\u0026ver=8.244.2\u0026is_native=1 HTTP/1.1\r\nHost: nereserv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://telegram.auto-crypto.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T13:30:23.689695Z","times_seen":17708716,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"nereserv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S338787161:1767008027299519\u0026ifkv=Ac2yZaVxGXtcZl1oT0mJCK7PeSzu8YbwZz2ROsE0y_aYDtOu0u4KLAVR5u2zOiMbP9IaOY_9en5Ohg","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.150.84","port":443,"asn":15169,"as":"GOOGLE","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:47.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://m.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S338787161:1767008027299519\u0026ifkv=Ac2yZaVxGXtcZl1oT0mJCK7PeSzu8YbwZz2ROsE0y_aYDtOu0u4KLAVR5u2zOiMbP9IaOY_9en5Ohg HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:nE889u6DBnfqNgydEtayRYSG4hoLtQ:Bruz6CnnJeDRUeYs;Path=/;Expires=Wed, 29-Dec-2027 11:33:47 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 29 Dec 2025 11:33:47 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S338787161%3A1767008027299519\u0026hl=en\u0026ifkv=Ac2yZaX001IVutOjSYO_Kf_s1hiiBsKkMrwimtVansVxP0SHgbKYC1BFgpKErvCoBN1sUSypavrKPA\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-GKvZJxCrwYEGkJNcav6KVQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 415\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T13:30:23.689695Z","times_seen":17708716,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.auto-crypto.click/assets/index-8I_ildag.css","fqdn":"telegram.auto-crypto.click","domain":"auto-crypto.click","tld":"click"},"ip":{"addr":"45.148.28.36","port":443,"asn":44803,"as":"Webdock.io ApS","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:42.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegram.auto-crypto.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 15:35:38 GMT","end":"Thu, 19 Feb 2026 15:35:37 GMT"},"fingerprint":{"sha1":"61:0D:0B:35:4B:87:C7:03:CC:69:A2:7D:66:36:C7:FF:D1:20:65:8D","sha256":"5E:7C:E0:53:4B:73:53:04:B7:39:FA:80:5E:A7:F2:4A:C5:1A:DB:19:CA:9D:00:DC:D6:A0:60:E6:30:2A:8E:29"}}},"request":{"raw":"GET /assets/index-8I_ildag.css HTTP/1.1\r\nHost: telegram.auto-crypto.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Mon, 29 Dec 2025 11:33:42 GMT\r\netag: W/\"8b0c-19a8771c53b\"\r\nlast-modified: Sat, 15 Nov 2025 12:16:11 GMT\r\nx-powered-by: Express\r\ncontent-length: 35596\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":35596,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (35595)","md5":"631d03752d06b492df30feaba88ec38e","sha1":"d2e65dd1627de0d35e858d3be4166dfde09eb77f","sha256":"8a013af05803fbf5f0cf5401e9eb3feb475a47bfd21041da231f8ef2810cb043","sha512":"6e3bdaf117804f1f78436a359d1c316253eef87be2920c61f500382f26b7fe1f6f02e91934c2c6f2028999ff01e21096440ff0c9adbd71ec2e8fc7df02a9be09","ssdeep":"384:u9CttUVPwS0r1TqmIM61cEXZ/K/y/HZNUruP4VY484t+MF8tf:u9Qty4X6XZNUruP4V8+tF8d","tlshash":"70f295295ba0103b7c63a0e5d6d8b61dfa2eb0c2df3d67a9bdc65110a7d23f64c97600","first_seen":"2025-12-29T11:34:22.743122Z","last_seen":"2025-12-29T11:34:22.743122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"telegram.auto-crypto.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.auto-crypto.click/assets/index-BhSMCli2.js","fqdn":"telegram.auto-crypto.click","domain":"auto-crypto.click","tld":"click"},"ip":{"addr":"45.148.28.36","port":443,"asn":44803,"as":"Webdock.io ApS","country":"Denmark","country_code":"DK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:42.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegram.auto-crypto.click","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Nov 2025 15:35:38 GMT","end":"Thu, 19 Feb 2026 15:35:37 GMT"},"fingerprint":{"sha1":"61:0D:0B:35:4B:87:C7:03:CC:69:A2:7D:66:36:C7:FF:D1:20:65:8D","sha256":"5E:7C:E0:53:4B:73:53:04:B7:39:FA:80:5E:A7:F2:4A:C5:1A:DB:19:CA:9D:00:DC:D6:A0:60:E6:30:2A:8E:29"}}},"request":{"raw":"GET /assets/index-BhSMCli2.js HTTP/1.1\r\nHost: telegram.auto-crypto.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Mon, 29 Dec 2025 11:33:42 GMT\r\netag: W/\"78fc9-19a8771c53b\"\r\nlast-modified: Sat, 15 Nov 2025 12:16:11 GMT\r\nx-powered-by: Express\r\ncontent-length: 495561\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":495561,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (39681)","md5":"77a94006b2fd9fa38fbe5a5d2a0acc52","sha1":"37395e4cf98d94572c43c9e16e07504d8525e6a3","sha256":"7dace0da55164fcbb23f258f11f2a6dfa00f6c85f7182e652d31b0c7e94cac59","sha512":"e2a682e13f9099ad517867fb45e62d2f2569fcf40326974631b849b21fb9a2f2a62fbddbbb14acae3623353dcd834f96346569ea080aebc6b7e101c4abc9cd57","ssdeep":"6144:+uca6v75tvtl7Sv8j+SYprOHGFXBXM5V8aVcnbL5JvPfENVL+Nj6t56nLrikfJfu:Lmvvt5jHaXoV/SL5JnKVLoExDpJSE","tlshash":"e4b44ad5b386b16113db47d450bb0106f33a2c99780d84a8f36c9dda7e7158882bbfb9","first_seen":"2025-12-29T11:34:22.743994Z","last_seen":"2025-12-29T11:34:22.743994Z","times_seen":1,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":252,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"telegram.auto-crypto.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"partner.adextra.io/jt/4e70f1562e10e7032c5858ed66f2d201d1965f25.js","fqdn":"partner.adextra.io","domain":"adextra.io","tld":"io"},"ip":{"addr":"104.21.87.177","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:44.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"adextra.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:24:52 GMT","end":"Fri, 27 Feb 2026 23:22:34 GMT"},"fingerprint":{"sha1":"A1:74:8C:0A:64:32:67:01:42:4B:D5:F0:6F:91:DD:33:AC:A3:13:97","sha256":"35:AD:12:AA:DE:52:09:3C:5D:21:5A:A4:52:1D:89:3D:CA:C2:9E:F3:E9:5F:0C:AB:8D:59:25:F2:5A:DA:D3:7B"}}},"request":{"raw":"GET /jt/4e70f1562e10e7032c5858ed66f2d201d1965f25.js HTTP/1.1\r\nHost: partner.adextra.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 29 Dec 2025 11:33:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7t2DdjW2SIkkc6MCTdEI%2Fjs8Ogw3qDIZ0rikWv5ZrsMJuuIzDlkGt4%2FoznHV6ubqHcbsjxumhMHluVJHnnuFbkIqJvCHWAYY9ML0f9j8CaSIDA%3D%3D\"}]}\r\ncache-control: public, no-store, no-cache, proxy-revalidate\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9b58fbfb2ef8a41f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"6aabd59c3d57a8d2b9ed2d66a0d86092","sha1":"4c4c1b924147f409c3967aafbe75d20c826e21fc","sha256":"67b3a180ffd11577bca73bdb0fdda7ba27d425a8b70f95724fb7e6ed2381ab69","sha512":"99c7a0f103ba5fd2f7d1107e833ef443bc32a2363caae1ff74fbe43d0ae228d0cb9f8a5b73b50f7cd2bfd7c90efec4010125a869d99a96c4d272cd32c3861e66","ssdeep":"","tlshash":"68e02b642cb0c2614a261507627fd45075e1601aa405f469aaddc6485e60fda8c59db4","first_seen":"2025-09-04T14:32:16.457214Z","last_seen":"2025-12-29T11:34:22.744863Z","times_seen":2,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":88,"dns":32,"connect":2,"send":0,"wait":80,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/ton-blockchain/wallets-list/main/wallets-v2.json","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:44.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /ton-blockchain/wallets-list/main/wallets-v2.json HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://telegram.auto-crypto.click/\r\nOrigin: https://telegram.auto-crypto.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: text/plain; charset=utf-8\r\netag: W/\"064700a02c5b9ae6c6cac1fa41655323d1afbcebfebe9a1c8e0fe8f2a4dc3f9d\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 20C0:83E86:C49376:DF94B0:694A857F\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Mon, 29 Dec 2025 11:33:44 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410025-HEL\r\nx-cache: HIT\r\nx-cache-hits: 45933\r\nx-timer: S1767008025.823947,VS0,VE0\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 4e9e63308770b26b29b1542df33f5d4be19389be\r\nexpires: Mon, 29 Dec 2025 11:38:44 GMT\r\nsource-age: 134\r\ncontent-length: 2807\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":20900,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"c4636df88201926e72037ed726e3c076","sha1":"ddf1ebcb16efbd4981e04193f124b13b4ede7b30","sha256":"6153170a5e033ec45c0d7d25bde8ff9036a8b5b8ac4d84b8b031c4aeb59f75f3","sha512":"723412b158a0a08a8ab63b1307ac2c8be50798afa4db8164039a1b235dd100da8d16a768e527224f9f5b5634edf602cc560aa9439a2a687543050ce15765f776","ssdeep":"192:kKW5oWrd4iffmGLTy5DnJ2uBwYXuekNv8N97Npzx/IJBlGWe3/SBDGdONIQG0dHF:kK4sgcJJBVERJeVM6fEHOsMQ","tlshash":"3c9200abc6344c27025561f4689a2286f611418bccd0bc69fb4c489c6fdddbf24bb79e","first_seen":"2025-12-24T06:30:41.997213Z","last_seen":"2026-02-20T15:57:31.535376Z","times_seen":47,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":1,"connect":21,"send":0,"wait":14,"receive":1,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:44.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"21:10:1E:48:79:6B:E7:49:AB:BB:0E:38:86:C8:4D:74:7B:42:EE:BB","sha256":"0A:58:99:06:D8:BC:1C:BD:3E:CE:EF:7D:D6:D2:50:2D:1E:DE:8F:87:97:56:72:B9:3F:21:88:AC:79:3A:75:03"}}},"request":{"raw":"GET /s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://telegram.auto-crypto.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28244\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Dec 2025 06:52:04 GMT\r\nexpires: Wed, 23 Dec 2026 06:52:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 535301\r\nlast-modified: Wed, 27 Aug 2025 19:19:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28244,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28244, version 1.0","md5":"9d503278216c2225184a236c64e0924b","sha1":"0c24c621374506ce70403a7473b47acd86bbf919","sha256":"2add7d60b1cd2ab84c9967e23d5ec08eb3fc9635c46855b17d59404dec6b410e","sha512":"fa1aca723eb40b6026aa1d21b36ce2573e4164516c9a0b55ff830a434c3954833a06b1df76236b1d682107df1bd3d263ed19cba854c1a6795566a7091749696d","ssdeep":"768:/6zZ6KBVHUlHvwCa0z1sCvODsIBMTKmJ3GG5x4:yzdKvwtszvdNjz4","tlshash":"3cc2e083d14afb33d0afb77adc52d022e9756bccec7e587a97a900398895c1b0644285","first_seen":"2025-09-02T18:36:17.739185Z","last_seen":"2026-08-04T12:53:22.105119Z","times_seen":13277,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":0,"dns":1,"connect":42,"send":0,"wait":29,"receive":28,"ssl":237},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rupartner.adextra.io/4e70f1562e10e7032c5858ed66f2d201d1965f25/js_ads/assets/index.js","fqdn":"rupartner.adextra.io","domain":"adextra.io","tld":"io"},"ip":{"addr":"144.31.85.130","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rupartner.adextra.io","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Nov 2025 17:42:43 GMT","end":"Thu, 05 Feb 2026 17:42:42 GMT"},"fingerprint":{"sha1":"67:A6:55:BE:5A:12:93:29:3B:20:E7:04:5D:26:8F:AB:36:FF:52:02","sha256":"09:07:9B:92:D8:3A:95:90:E1:EB:81:50:21:D6:85:C8:EB:7D:E2:77:DF:F1:BB:49:A1:EE:BC:61:E8:3C:FC:F3"}}},"request":{"raw":"GET /4e70f1562e10e7032c5858ed66f2d201d1965f25/js_ads/assets/index.js HTTP/1.1\r\nHost: rupartner.adextra.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://telegram.auto-crypto.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Mon, 29 Dec 2025 11:33:45 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, no-store, no-cache, proxy-revalidate\r\nsourcemap: /4e70f1562e10e7032c5858ed66f2d201d1965f25/js_ads/assets/index.js.map\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89233,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"18b4c3ad532ce5201c931568c73466c6","sha1":"6e282f9ad5578fb89c332054d8d0f04dd8945b60","sha256":"663efc10872629134507181658e7b2d900fc5f46a91401847741a314e2572740","sha512":"e7ee09441b35fc852db9469555d7bb33ccffacd5cfa715c5ef641ddf156fcaf5485820b083a96598cc08c0fefca4e61c6cd5c11e6d3705b475e7465b601a5bb2","ssdeep":"1536:FtR24DNGV4i+3g8XRpmedD15XO1UvQDmNi:VJeY5e1mNi","tlshash":"43930906637d70f1177619b3b2b66017f9684d6ea98cdaf0916ea634fde1202b33d4a0","first_seen":"2025-12-29T11:34:22.746127Z","last_seen":"2025-12-29T11:34:22.746127Z","times_seen":1,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":66,"dns":31,"connect":20,"send":0,"wait":74,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/bitgetwallet/download/refs/heads/main/logo/png/bitget_wallet_lite_logo_288.png","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.111.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Sat, 07 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91","sha256":"7D:11:22:EA:96:98:52:34:1E:8D:D9:2B:CC:0C:7E:CC:00:96:30:D1:4D:A7:34:D7:CA:42:D5:B5:4A:2B:20:97"}}},"request":{"raw":"GET /bitgetwallet/download/refs/heads/main/logo/png/bitget_wallet_lite_logo_288.png HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/png\r\netag: W/\"2eb981b3c8258ccd9a459bea1d2436f3ebc805554d414c40a14b505ecab8353f\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: D22F:3D793:533F7F:5DE331:6949E706\r\naccept-ranges: bytes\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410024-HEL\r\nx-cache: HIT\r\nx-cache-hits: 13\r\nx-timer: S1767008026.148934,VS0,VE0\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: ec1f259c2d23757b97821979ce43521a9be89ae8\r\nexpires: Mon, 29 Dec 2025 11:38:46 GMT\r\nsource-age: 277\r\ncontent-length: 4559\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":4559,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"525190b4c53937d7c56f3d309692bf63","sha1":"5029148786ac8b95e02d0601c75df3344873caf3","sha256":"8002cdf4ab56e860be9178a3c678e43e913ccdd841ca806c084b86cf6adafd16","sha512":"e934b60893b529e3acdc52a7f95cf782f1821523d46dfc0f73393498a624d56a315da173d334ac7b6086f7c156e93e3f753a165369b4da4c44c35e58bb09fcd5","ssdeep":"96:wS/0nZZUU1vi/d0hnC63a0Adl5iSyhhNEcm9g0uD3eS:wS8f120b3/Adl5iTIcLJD3eS","tlshash":"cd914bbea7cfea78be0970e8341752b06c24f45836674d5bd5cc2b065313e9160ea096","first_seen":"2025-05-21T09:31:59.849824Z","last_seen":"2026-07-27T15:10:52.873453Z","times_seen":556,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":24,"connect":52,"send":0,"wait":34,"receive":0,"ssl":215},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fp.metricswpsh.com/fp?tag_id=309919","fqdn":"fp.metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"157.90.84.242","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:46.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 11:47:47 GMT","end":"Sun, 08 Feb 2026 11:47:46 GMT"},"fingerprint":{"sha1":"05:1E:63:2F:40:1F:87:C3:0D:F0:42:C7:EA:E8:B1:D8:6F:76:7C:FC","sha256":"1C:13:0E:F6:58:8A:8C:D7:DE:1F:9F:20:D5:17:50:15:02:D5:C8:8E:39:40:68:3F:01:24:F2:73:14:BA:25:0F"}}},"request":{"raw":"POST /fp?tag_id=309919 HTTP/1.1\r\nHost: fp.metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json;charset=utf-8\r\nContent-Length: 1973\r\nOrigin: https://telegram.auto-crypto.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1973,"data":"{\"timezoneOlson\":\"UTC\",\"incognito\":true,\"fonts\":{\"value\":[\"Bitstream Vera Sans Mono\",\"Century\"],\"duration\":273},\"fontPreferences\":{\"value\":{\"default\":173.11666870117188,\"apple\":173.11666870117188,\"serif\":173.11666870117188,\"sans\":162.01666259765625,\"mono\":122.68333435058594,\"min\":10.800003051757812,\"system\":162.01666259765625},\"duration\":229},\"languages\":{\"value\":[[\"en-US\"],[\"en-US\",\"en\"]],\"duration\":0},\"colorDepth\":{\"value\":24,\"duration\":0},\"deviceMemory\":{\"duration\":0},\"screenResolution\":{\"value\":[1280,1024],\"duration\":0},\"hardwareConcurrency\":{\"value\":48,\"duration\":0},\"timezone\":{\"value\":\"UTC\",\"duration\":42},\"sessionStorage\":{\"value\":true,\"duration\":0},\"localStorage\":{\"value\":true,\"duration\":0},\"indexedDB\":{\"value\":true,\"duration\":0},\"platform\":{\"value\":\"Win32\",\"duration\":0},\"plugins\":{\"value\":[{\"name\":\"PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chrome PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Chromium PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"Microsoft Edge PDF Viewer\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]},{\"name\":\"WebKit built-in PDF\",\"description\":\"Portable Document Format\",\"mimeTypes\":[{\"type\":\"application/pdf\",\"suffixes\":\"pdf\"},{\"type\":\"text/pdf\",\"suffixes\":\"pdf\"}]}],\"duration\":0},\"vendor\":{\"value\":\"\",\"duration\":0},\"cookiesEnabled\":{\"value\":true,\"duration\":0},\"colorGamut\":{\"value\":\"srgb\",\"duration\":0},\"rendererUnmasked\":{\"value\":\"\",\"duration\":102},\"brand\":\"\",\"device\":\"\",\"os_type\":\"desktop\",\"os_family\":\"Windows\",\"front_browser_family\":\"Firefox\",\"front_browser_name\":\"Firefox 134\",\"pixel_ratio\":1}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Mon, 29 Dec 2025 11:33:46 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nContent-Length: 58\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://telegram.auto-crypto.click\r\nSet-Cookie: id=11621196186850396025; Expires=Tue, 29 Dec 2026 11:33:46 GMT; Secure; SameSite=None\r\nVary: Origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c4efc1d6d16235d9433cd2565d887460","sha1":"22d069a5f536640e46122475c79db933e82d7f2e","sha256":"f0a6b8c736b7d8c5d3304a9ccd10d2114a0f25f2ba946cce62204df3384a131f","sha512":"af1cfe529f3173efdc7f4aff67355529095e775d8edb38d8a7c9565e09807aff470a465ffdf89ef6555f06cc88efa675823becc942896c63fa64a3140858f539","ssdeep":"","tlshash":"5ba00294c5c00e3c80200c3a73cf901628e4d304120217880ca66b5108822abe333c91","first_seen":"2025-07-26T17:44:43.174102Z","last_seen":"2026-06-07T07:46:29.043892Z","times_seen":7033,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":26,"connect":28,"send":0,"wait":39,"receive":0,"ssl":128},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-28","alert":"Sinkholed","trigger":"fp.metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ntvpforever.com/in/multy","fqdn":"ntvpforever.com","domain":"ntvpforever.com","tld":"com"},"ip":{"addr":"94.130.198.6","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:46.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"inpage.infrapu.sh","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 02:02:57 GMT","end":"Wed, 25 Mar 2026 02:02:56 GMT"},"fingerprint":{"sha1":"C4:80:D6:E8:F3:2B:FD:8A:89:D9:CF:8B:78:3F:74:35:34:B3:68:8A","sha256":"DF:07:A2:74:C6:6C:63:AA:37:DD:AA:4F:E0:F5:C5:D7:9C:B8:28:C4:9C:45:3F:F7:BC:1B:0A:AE:7F:38:FF:B1"}}},"request":{"raw":"OPTIONS /in/multy HTTP/1.1\r\nHost: ntvpforever.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://telegram.auto-crypto.click/\r\nOrigin: https://telegram.auto-crypto.click\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.20.1\r\ndate: Mon, 29 Dec 2025 11:33:46 GMT\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T13:30:23.689695Z","times_seen":17708716,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metricswpsh.com/in/track?data=eyJ3bCI6MCwic3ViaWQiOjAsInVzZXJfaWQiOiI4ODIxMzkzMzg1OTg2Njk3MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjIuNDAuMiIsInRhZ19pZCI6MzA5OTE5LCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuNTksImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0=","fqdn":"metricswpsh.com","domain":"metricswpsh.com","tld":"com"},"ip":{"addr":"159.69.167.66","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"notification.tubecup.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 11:47:47 GMT","end":"Sun, 08 Feb 2026 11:47:46 GMT"},"fingerprint":{"sha1":"05:1E:63:2F:40:1F:87:C3:0D:F0:42:C7:EA:E8:B1:D8:6F:76:7C:FC","sha256":"1C:13:0E:F6:58:8A:8C:D7:DE:1F:9F:20:D5:17:50:15:02:D5:C8:8E:39:40:68:3F:01:24:F2:73:14:BA:25:0F"}}},"request":{"raw":"GET /in/track?data=eyJ3bCI6MCwic3ViaWQiOjAsInVzZXJfaWQiOiI4ODIxMzkzMzg1OTg2Njk3MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjIuNDAuMiIsInRhZ19pZCI6MzA5OTE5LCJzY3JlZW5fcmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsImFkYmxvY2siOjAsInRpbWV6b25lX29sc29uIjoiVVRDIiwidXRtX3NvdXJjZSI6IiIsInV0bV9tZWRpdW0iOiIiLCJ1dG1fY2FtcGFpZ24iOiIiLCJ1dG1fY29udGVudCI6IiIsIm1tIjowLCJpbml0X3N0YXJ0X2xhdGVuY3kiOjAuNTksImlzX3YyIjowLCJpc192Ml9lbXB0eSI6MH0= HTTP/1.1\r\nHost: metricswpsh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://telegram.auto-crypto.click\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 29 Dec 2025 11:33:45 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T13:30:23.689695Z","times_seen":17708716,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":130,"dns":13,"connect":30,"send":0,"wait":35,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-29","alert":"Sinkholed","trigger":"metricswpsh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"public.bnbstatic.com/static/binance-w3w/ton-provider/binancew3w.png","fqdn":"public.bnbstatic.com","domain":"bnbstatic.com","tld":"com"},"ip":{"addr":"52.84.50.120","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:45.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bnbstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 25 Aug 2025 00:00:00 GMT","end":"Mon, 21 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:AF:F8:16:BA:38:D3:92:CC:06:D0:21:3C:49:7F:84:25:DA:57:2F","sha256":"E5:53:5A:4D:15:73:C1:86:18:5C:67:94:60:62:42:8A:A9:EA:B6:AA:81:2B:BF:13:0E:E8:60:83:1F:BD:5A:92"}}},"request":{"raw":"GET /static/binance-w3w/ton-provider/binancew3w.png HTTP/1.1\r\nHost: public.bnbstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.auto-crypto.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 3327\r\nlast-modified: Tue, 24 Sep 2024 17:31:20 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 23 Dec 2025 08:21:34 GMT\r\ncache-control: public, max-age=604800\r\netag: \"5a11a30728446ef34ac8014d50ec00f7\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ed0b1ae4224d4a858ec43080e17ab00c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 6GaqtlrT0w1rFp8zw30pPMx4qjisn3_iOFqFrdHSrQceZLEeWkLrWA==\r\nage: 529936\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3327,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"5a11a30728446ef34ac8014d50ec00f7","sha1":"1db62c52214cbc93f970d9555d83e4efdb8830c5","sha256":"807e8174dace81c78fc32dbfcf20bba9317bb6502a47c6697245abeb5edc13b9","sha512":"d6d37e34d98f3ad1aef0c87cdd8abc1acaf1bbbee1317cf87edb67c3c8d194ff45ba65ac3d4b47146db0a71cb1278191ead2ef36bf19c47933e35e1ac1e57c89","ssdeep":"","tlshash":"db61f7d41d4b02f2626b3811167b743e9835c4227e58bb6e32a1bf9b8354a391cad792","first_seen":"2024-10-08T20:51:51Z","last_seen":"2026-07-27T15:10:52.886387Z","times_seen":660,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":55,"connect":11,"send":0,"wait":23,"receive":0,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S338787161%3A1767008027299519\u0026hl=en\u0026ifkv=Ac2yZaX001IVutOjSYO_Kf_s1hiiBsKkMrwimtVansVxP0SHgbKYC1BFgpKErvCoBN1sUSypavrKPA\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.150.84","port":443,"asn":15169,"as":"GOOGLE","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegram.auto-crypto.click/","date":"2025-12-29T11:33:47.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fm.youtube.com%2Ffavicon.ico\u0026dsh=S338787161%3A1767008027299519\u0026hl=en\u0026ifkv=Ac2yZaX001IVutOjSYO_Kf_s1hiiBsKkMrwimtVansVxP0SHgbKYC1BFgpKErvCoBN1sUSypavrKPA\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Mon, 29 Dec 2025 11:33:47 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-Y-heccQS-hsDrzEsyaO-_g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.jam3aJYHpRA.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T13:30:23.689695Z","times_seen":17708716,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}