{"report_id":"52d403c5-535e-4f9a-acc1-239d86eabde6","version":6,"status":"done","tags":[],"date":"2026-04-04T15:35:05Z","url":{"schema":"http","addr":"hdi-telegram.com","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hdi-telegram.com/","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"title":"Telegram 中文官网 | 下载 TG 客户端 | 安全聊天工具","dom":{"size":51622,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (48400), with no line terminators","md5":"50f3b178efddfd17c7d99380f584b43c","sha1":"c056c089f6d0e2303b4960aff874b096871fce7a","sha256":"462c243b9670b8f3d1b2935583e22f8d6104a784660857ee2819a478f2e17019","sha512":"1d1cc6c76fe17db99e7814818d62422a07b495ddde94d05d016f3adec55ddd327986d5c82fa350c1898248b15b13f06803a8b7415b4aeea5b90a383d43e63d13","ssdeep":"768:V0RuIBKiQNTD1XHGtyDAFxRjDgH/Qkm92Qk+2hwYrhtaFt3+x:yByHGtyl","tlshash":"f2338538b149dd6dfc5b5e6a513ebd39109ec16bca47ed98d2d8c92143838386b93ec0","dom_hash":"domhashf731ad42eda2c2a553c48bdfccdc6631","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hdi-telegram.com","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T15:35:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hdi-telegram.com","ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-24","domain_rank":0,"first_seen":"2026-01-26T09:05:48.441371Z","last_seen":"2026-01-26T09:05:48.441371Z","alert_count":106,"request_count":53,"received_data":6697982,"sent_data":25408,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hdi-telegram.com/","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-04-05T04:48:53.353392Z","times_seen":80546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5cc1060370addb553db3d08f3b089aa","sha1":"7e4dc13b1b47d31f7b69002ab7ad60e181e31e69","sha256":"5ed3077d57272187e79a04f07074b45f71b802d275a43bb70ebe2b1bbe5a62ad","sha512":"6d0d7968f69c1d23f26d1b03cdca8c21cc3146d7d3903288db8a131df86259de069b207ced817ac1651ed290513a2c7a6eeed1564be7e77c3d205262e6099243","ssdeep":"","tlshash":"f101d455f40bf8623ca0de5f122b4f7e88d6ed3b807120acf29dc5c84266e360789d82","size":786,"data":"","first_seen":"2026-04-04T15:35:10.752117Z","last_seen":"2026-04-04T15:35:10.752117Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/_next/static/chunks/0122bb27ffb6a1be.js","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ab73ddd73fdd9f59898213a6b465fab","sha1":"0b34c03146ce77503f7d472fdc8e3bff6d68d30d","sha256":"acbb28e5d5e7f451d3e3012a38d411635dbf8e105234670581434a10d19cb331","sha512":"1d8ea7ddbcea35e65032c11c3087f677764738ef9db7aaa6c79f7d71589a9b06bf0cee26a9d3db03a2e6212fdab8d028ab1792d22c1e90fce6961dee3c7dd587","ssdeep":"1536:8s+IHdrBQKCpaR7IjUbzW9nUJTs3O7/rzib+aFivi:1vCEGjUO9qs+va+aF","tlshash":"93c3f7f935d5f48207ab40a6c03f0006f32d4d77189e68a0a3e5ddda746499de1b3faa","size":118290,"data":"","first_seen":"2025-12-31T19:15:39.940143Z","last_seen":"2026-04-04T16:37:51.92931Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/_next/static/chunks/f8c0db758fb27563.js","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"61c1daea776ff7b1d68ae7dca3cd3aaa","sha1":"dd6b805b5ccaffec05d57e6b6df9903104ebaa7e","sha256":"503c1ce491b504248a5bb3e74d111ffa4e3af4b047810498ca518130a290aadd","sha512":"fc7a4d91ad5a45176fad8e50af31e26774a097d44f0b359aa2002280c0feaf0e3516fea5099d1deddb1229e38c410377ef232613d60e87142a33b3248059d564","ssdeep":"3072:Ze1jSp2U0Ri4qi8xP/ykf4HTj6mN6Ubtv9Y:ZeJSp2UklH3xNbtv9Y","tlshash":"b4240be83955f6626ab302a710af1803733c292b280d4d60a251fdddb57845fb17bf9e","size":224520,"data":"","first_seen":"2026-01-09T07:29:13.298458Z","last_seen":"2026-04-04T15:35:10.729893Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/_next/static/chunks/ff1a16fafef87110.js","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5458632ee5cb3da028baebb11d5f70dd","sha1":"57e264834d3635e52fbbd3d93135842c09ce8525","sha256":"e9786b1305894e4119bb9811a816dac9cf576755596dd989ee15b455749fc35e","sha512":"28ae4e3a3828f99d64b7d4bfc7238d56c9ad910ce267dcb6c01e53be00c88f8a7f024640680d2bd66240a9972322744ee9147883a12ff8c92717c27ebb3fef50","ssdeep":"","tlshash":"63d02b702150f8d84086a4cc8836424bf52928b262fe3895d7ae8cb16174f0c51e1e55","size":282,"data":"","first_seen":"2025-08-20T23:30:20.185011Z","last_seen":"2026-04-05T04:59:37.780571Z","times_seen":15347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/_next/static/chunks/9ba3e27b1777c1d1.js","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87ae3d824fe61807302767bdeb020920","sha1":"c60ed3ed605bed42341d80ba1ff9dd806a4e7663","sha256":"539de4a8352c68dcb35d4a5a606578fd0b8c6fd0aa93831e86315f01edb75da4","sha512":"c482e4f2ddd51a9ca72f37cd1d0e05ad3de18c5bbc1477ca4a137f4a33b65187decb15aa8012c75869b8c9cf1d8030aacb2cba7deae10df950deeab54c31a613","ssdeep":"","tlshash":"ca41e3202b40f9ccb83758bd6c6dd1289039874dd6efc5686b7ed02106a16f8ea73767","size":2206,"data":"","first_seen":"2026-01-26T09:05:53.328536Z","last_seen":"2026-04-04T15:35:10.730925Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/_next/static/chunks/debd593eff01c060.js","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"13c921fb37f7066ffbbf78a0e2b3d1c0","sha1":"ae8f0d7c583a01dfb397d67882725978c8c92caa","sha256":"35b27c44c6e99f7831b1c96bfcf6a91ff01579639916b6db0d2647d0b9f6524a","sha512":"6a00fe4446459253c0f0f60197805758d2f94a5badbfc97ae4d6fd5ecaf7f96a00c2a17604d4de7fbbd1c5f8b29580196a2044daf484b4c85b5c4c998b278f1c","ssdeep":"192:ZhUoUQB9k84OONbcjEh048ktYAziKiENjsX4Ki5L/1zC12e68j2prP:V27vBK88kcRujY4p/1zC12eKb","tlshash":"3a72b5ae7195f4911fa364a5803f500bb23929b6286dc0b0e3a2dcf5b8f455dd133f9a","size":17119,"data":"","first_seen":"2026-04-04T15:35:10.722242Z","last_seen":"2026-04-04T16:37:52.005563Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a9632aa9dec83f5ca6595977e68cd9ef","sha1":"d75b1b830f7a5dfcb2d49088f00ca9ddd65f4d96","sha256":"4be945bed9d01939ced42db745de76d8f240cb45567a45f246ad2ab8e2e951f8","sha512":"3999a0bba770effd90c430ebe8b5a905dba294d99ebcd3063fd2818bc770ed231ced2cdb0c38a9cc8c514527c03a90d78557c5b623377372415ef2d0da1cc4b7","ssdeep":"96:LyED7cg1xqzc/xmWuKJo16Gg6wjEyFyJyujYryyyNwWLnMNQJq+Hc2TQbx:GngnqzcpmBcQkm9zMNQk+gbx","tlshash":"6cc18b387009de9dfc9e3d65113ead3920cd81ab8a96deb5c2d4de20468647db793ec0","size":5885,"data":"","first_seen":"2026-04-04T15:35:10.752952Z","last_seen":"2026-04-04T15:35:10.752952Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc478ef7d3f970d3f1c8f4b12af17d1e","sha1":"48961a26c24720dba6d3d92fba0104219036f415","sha256":"4b6d60dbeedad2b57a436f434d2adea2bf1972999ece6bfd15bf420668bf3fa4","sha512":"5b2c558a9597811cb05610002c22f4af144ec50cd56e1c158a9e28a85d31cab23382c9a24b4f9da632c30326e09b8f111ba303c09253b98f42d6ec042fb5ae71","ssdeep":"","tlshash":"3f417f68b40add56fc5abc6f003eae3a24de907b40b4eeb992d8ce050602d756386dc1","size":2013,"data":"","first_seen":"2026-04-04T15:35:10.75406Z","last_seen":"2026-04-04T15:35:10.75406Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a22ad358af1a520095c9180c9ba61288","sha1":"0dbac09f338105856616db7f439d4336ff340d2d","sha256":"795b97b282b2e8bdf88fe528e3e4af32f1a75eb873e290fb6fccf7baa0c53caf","sha512":"151d592bf5f0586148930d67e5360c97d60603bdac42616807530d53ac4579db9110caf0c6b969125f1832d240f781b00ee47c01cc4363ae6d3232fda9fa0576","ssdeep":"","tlshash":"24c080a0cc42cc1dc6670f261c7e1c3521dcc575474555479dd5d9291985b3105b5d8a","size":178,"data":"","first_seen":"2025-07-09T20:55:44.580625Z","last_seen":"2026-04-05T01:44:09.598306Z","times_seen":195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/_next/static/chunks/aa0a7c5c022cbeb9.js","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e79b1926473efc64178602f8682d563","sha1":"4c36c924f6467d150d457037eeaade15fac4095d","sha256":"a32cfbfeb00a7e262808bf7665f4cdd076d8fc1fe6321b0be01c97c9d7692bd9","sha512":"9d0faffcfdcc2b33d949a535dcbb42a6dbae9ceafde2fd8a51c9757f6a9b9f6ab07d2f600d0312fb4017b770c47731afa5c833ed8104186c167ffaf30999403b","ssdeep":"384:SjpjDvCaRAzb0mUYTOVF35o59D5qgg9BkECoeZoPUR+2lwQmbnxxtw6ZR:BIPr3K9D5qgg9evXZoPUPorH","tlshash":"d803b6b672d4f9a2139340e0843b2017f2290c76116d7570a7e4ccebb6588dda6bbfd9","size":38924,"data":"","first_seen":"2025-12-28T17:37:42.733635Z","last_seen":"2026-04-04T16:37:51.980545Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/_next/static/chunks/762794f61d142af8.js","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87e015d29aef8515d2f53f57e0ba811c","sha1":"695c780207e73e3223fc9760028a8cd8d89100c9","sha256":"b1ec577872a7a171c4cce57a8e0b41acbabf95c1a969f63341fadd54860e1c27","sha512":"d4062bc63a989bb34d4168d9e761b8cc7e31890016fd6e4df68d139ce292f53fee52520c15494020212c7f5e7c5f0197e4f5a6ac90c3a1c6a9cce1b1fd7429db","ssdeep":"384:XLWCnjdQkmGQuYrJ9Jr28TBObgu4g9YzkD9zlGlEA342y/lIE0w0Old:XyCnjikmuYFFTu99YCGlC6w0Old","tlshash":"bfc22ca531e5f8d6539b81c4843f000df37a0d75645eb0a4b3e99cea7960948e1b2fba","size":27632,"data":"","first_seen":"2026-04-04T15:35:10.734766Z","last_seen":"2026-04-04T15:35:10.734766Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0db79cfbbb76e3c351427150e0f2048e","sha1":"933f96a38437f2b2341812ad438f5d022645b9d7","sha256":"1f5ecfdb3d7982c3ff58aa31aa49fd4e2298492e27aa51b825dee972dab903a7","sha512":"febce9249ea1921c160d06baf2c5e85ebb2eccc8cc01c690edb665e246f613803aeee47284f4369956f4c033821347081c27492b17a901357096ed677f91ca31","ssdeep":"","tlshash":"d711ef646c2afa46af26cd79127dbd3990ccc3b84462ee64d18bce565133c301ac0e82","size":879,"data":"","first_seen":"2026-04-04T15:35:10.755383Z","last_seen":"2026-04-04T15:35:10.755383Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/_next/static/chunks/7340adf74ff47ec0.js","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"07116caaa974183af6252904a1e19581","sha1":"0a3fadd4f5b44a9c2343ad01a1f7a0a008a08982","sha256":"d8e91f5e0c241a7fc0b00a57fbd5398c27b03931244b685e2a703a1947dda34a","sha512":"58be518c26a497b772d6a91a59f38f8ce81252d54245bfe33c373a921c125f88a60bec66c4d4bd3ab4b2a8c1a6d26dfe3bd791218dde95ceadce8edf0a1bbaf9","ssdeep":"384:735S75Bq9E0m1YmRDQ0cJ3tn79Fg/Ag8qWtOPSNsbU:D5S9BX0ZMOx6bU","tlshash":"fed2e8717395f9a352db85d9d03a0015f2290d3530ae24b0b394dcef368dc89a1fafa5","size":30717,"data":"","first_seen":"2025-12-20T12:16:43.561499Z","last_seen":"2026-04-05T04:15:23.452806Z","times_seen":848,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4e88bd6e28c34f9e5e882410441e967","sha1":"9adb3e0dba9442c1042bab9a9a18132443db81f6","sha256":"436f5a0697b80fe82d4fbe67ddc6762437582a117feca4f2093a886fa67bd8be","sha512":"3091d1bdb2c2fa07d1d946530107d661bb71d095f81e1e3691d1f6667485e72c86a5616e43dce2dc09ae16accd9651124ed9877da4a33ee180779a156843f149","ssdeep":"","tlshash":"95c09b25d50bec252471de5f103e5fbd49c5d8374830215d73dcd54c1251d225b4dd45","size":143,"data":"","first_seen":"2026-04-04T15:35:10.756192Z","last_seen":"2026-04-04T15:35:10.756192Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f8d124c53712561ab6c460bf2375f3f","sha1":"17dccea4d7073952522b88b1eb5268d3fadf63bd","sha256":"85589137c9af9c79706032d5896ac94575a300b4f96d783d3dff3bb1086e9555","sha512":"441dcd97e7418c325a5cf12b155282dc157e1f1f7b11f4b4f074a4921fc947bc13e6bb4d64ccd6a008219661a98012ef70e346400ab17eca9a881e9b4e265e50","ssdeep":"96:LT7oXzlGWjQogXjm9wxK55Xn47XjmbWnHRZXjmo/rxnfKjHYITLR:roHPK0PR","tlshash":"50b18b2db10ad9acfc9b3d54213fac39558dd26b468adea4c1d8dd31968343ca783ec0","size":5320,"data":"","first_seen":"2026-04-04T15:35:10.757041Z","last_seen":"2026-04-04T15:35:10.757041Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ea3d4a7913a51dbb4b02be7b0ff22b4","sha1":"9e97311d3568976841a175776287aa1949a050c1","sha256":"fa0fea41e5323c8819831836e94526d26e1fd3d13afa68488975d55585515fcb","sha512":"cf52650c7cc4511389414cb49b4e476f4b742f55f9cb43879c7d053886d7f119e9580cbc061bd1efddc2aea06f0e5ebd9135fbed3e7b79bfbddc2b18b6103c75","ssdeep":"96:LCS3tNBbzPQTBL+5QsB2xESF46wzQZYPk/O5pHn+:+INd2449ZOf+","tlshash":"1c818a3cb156c96dfc9b6e19113e6c3a248ed2ab5f47fd94c694e9314182438aad3ac0","size":4202,"data":"","first_seen":"2026-04-04T15:35:10.758019Z","last_seen":"2026-04-04T15:35:10.758019Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/_next/static/chunks/turbopack-883eea257e2d74a0.js","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c431c2398af7811dd14c39cdcaa044b","sha1":"f7ac3b274eb107832396a013973cc7ba8ce5dbb4","sha256":"f86a15d45369394879945ce4d4df8e24d8add3293a0c69110cee203d62123d9b","sha512":"d6104ff7cb5cf099976b5db040751b7a0e9616e33e03e62689da396131d24d1749a377e9c4117da254cd1b980d65daad4e70f039fd099a38e884e16bc35bda34","ssdeep":"192:yspVl08/EsUnUj5EGdoFNplHda6Mh60W9xocxkUk1MsS:yspVvXIblHA2VroQZ","tlshash":"c622d6da37a6f077436fa1e6807f0044f17944a8145d582c93aca8fa38394ae49e3f67","size":10250,"data":"","first_seen":"2026-04-04T15:35:10.733935Z","last_seen":"2026-04-04T15:35:10.733935Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"83dd4f06a069dd01b736c2f822af3d53","sha1":"fefe08d91fa8f0e24da7b1c73ee537d2263bcb26","sha256":"a4beb2a2987c5c722a7be67d155884839d891c078447df70306bdaea7879f6ad","sha512":"a48c21b0df22f358feae93c7a4ea1cb8d274d9927d3b64ec5aeee8980471f6937131e8c7212ddf2d9d872dce01c903abd8b9e5d5d4effc8a16912cc1e806f3dd","ssdeep":"96:Lr1S3fbz0TBD5usxESF46wzQAYPk//x92NjI+:X1Gcz9ZHnb","tlshash":"6291cc3cb156c96dfc5b6e19053f6c39248ed2ab4b87fd94c594d9310683438abd3ac0","size":4309,"data":"","first_seen":"2026-04-04T15:35:10.758903Z","last_seen":"2026-04-04T15:35:10.758903Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"85087ed24652ae9811eda4377074cfb6","sha1":"d6ac89239f5851fd3bfa8d448b95cf8b23117b80","sha256":"8eebb9433382342488914bd50f3d8bc36e752c80a7f8291266ea8040604b592e","sha512":"38002d56b39137982e1cd1dd375a5826437472b2db65b10ce13ee58d61aa78738bb47e2484a1129f2ecf71de657f47eecbc730790c26cdebc0e17bb60ca5305f","ssdeep":"96:LkS37bzjnlTBJ53n3OnexESF46wzQdYPk/YgQBN9IM:oavnn3n+nQ9Zih","tlshash":"c591bb3db056cd6dfc5b6e19113e6c3e248ed2ab5b87fd94c994d8324182438abd39c0","size":4375,"data":"","first_seen":"2026-04-04T15:35:10.759659Z","last_seen":"2026-04-04T15:35:10.759659Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"hdi-telegram.com/download/__next._index.txt?_rsc=nn07o","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:40.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /download/__next._index.txt?_rsc=nn07o HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_index\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:40 GMT\r\ncontent-type: text/plain\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:37:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69d06b5f-178c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hT4cUJUNSyw9UiiUvint0KJoL8WXMJiJaNlCSr%2BKqhqX3odSEIj1k8kqAM31iwOgtc8JDva%2Fh2LoDLwhW8kpepJDz3B3gVhhyRbhdL7KW5T5vjG02qu9rPbQRDMJAKmjIZe2\"}]}\r\ncf-ray: 9e7160e61c66723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6028,"size_decoded":0,"mime_type":"text/plain","magic":"Unicode text, UTF-8 text, with very long lines (4652)","md5":"07549052004ba0f6655958c1b54232a2","sha1":"b185fca664eb1e5f02eee64f04b6aecc074282ce","sha256":"169eba9a8d89c29636a0df2641a01d40873b7cd76734ec5539612fdddd4acf5f","sha512":"a6858fdaa7a38b63415dc76c172b8750fe0854f4bb0abd87ed93526cb2dd3cd544eff6875b81b757eb0f052b66b0396818e73fecf3368a7a59bc94d88214e49f","ssdeep":"96:olv1Sda7EfUHDAz/kM/V0aLQDRQzhTuIYr+P9696916+i9r9ylGvkonivq6Sz7N3:oltMa7EIAz/HN0aLQDRQBuIYr+P9696E","tlshash":"bfc1bd396749aebe7e7b409a502fe31e716e413b9a625df6d2bdae1043421347d037c0","first_seen":"2026-04-04T15:35:10.718314Z","last_seen":"2026-04-04T15:35:10.718314Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/__next._tree.txt?_rsc=1r34m","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:40.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /__next._tree.txt?_rsc=1r34m HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:40 GMT\r\ncontent-type: text/plain\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:37:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69d06b60-1ca\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fBF5Oy1d%2FYO%2FTGdhKWg0YB%2BER%2Bqs24buuARNj4QyO2pGBZFBxvBYw21c5miLPCtBUp5u71F8rKcQEtVYNkiCfWT79fJJGZY6hOGMdn%2FhFjBG8AaPkj%2FXP9VEST7gRqCjsrwX\"}]}\r\ncf-ray: 9e7160e76ca0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":458,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text","md5":"13a4a5254a5044f5317837d4e84cc5d4","sha1":"6e1891221d01410a356055ad693e259daa643380","sha256":"4a6228ae562b2a5f762af1e428fe19beacda3482127fb36578ba6f6c0d38f666","sha512":"86c3aa2f84550ba60e325f3e0bb83464ec15700e7eec403541b370bb41202b93d82de720da22c6f39139b991aab3e534079c98dde9d0da3d9ca1082d6ee6fa24","ssdeep":"","tlshash":"c2f0552e8858bc5d48d1988c1289eb0a123cca3bb4a50ce9c4ce1c5227bf0380f8b603","first_seen":"2026-04-04T15:35:10.719306Z","last_seen":"2026-04-04T15:35:10.719306Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/contact/__next._head.txt?_rsc=1pn8p","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:40.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /contact/__next._head.txt?_rsc=1pn8p HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:40 GMT\r\ncontent-type: text/plain\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:37:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69d06b5f-55c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Emj81YFZ%2FZDiOhA7GimPWZdRrA3qdZWfyrvG7mn%2F9qnRkAJV190gpTxvREnUt38spYFXiP60Q6W3rajnfwYOMfMfGzyCcWTjX%2Fu6hGK5%2FkuHiaLHRloICNoIW7g8f2FRnXIl\"}]}\r\ncf-ray: 9e7160e8ecc3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1372,"size_decoded":0,"mime_type":"text/plain","magic":"Unicode text, UTF-8 text, with very long lines (881)","md5":"4aa2effb72bbbc8bc906ac61f8f18ac4","sha1":"f712247a819aeb0cbe8c8eb816a53c2035c7d4d9","sha256":"3c135ba6c40286396f005af1ac2cef2526d08812fb25205bdbc3d5638649edac","sha512":"076d62160dd1c5eec91e805cee1145512ecdc1e86669f4aec0e1f1682a389f82c10f993cf79c80d270144eb59fb7bade9477504c481b7e16e4a14657e8f7db30","ssdeep":"","tlshash":"6a21ce7e5909dc1f3b9bcd4d005ba31fa2be963b46792c75c14d8e1907997290f4a2e0","first_seen":"2026-04-04T15:35:10.720188Z","last_seen":"2026-04-04T15:35:10.720188Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/_next/static/chunks/0d16bec00dd85a08.css","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:38.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /_next/static/chunks/0d16bec00dd85a08.css HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdi-telegram.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:38 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:36:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69d06b38-1157a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gVgZ1PI%2Fhr%2FC1GnJUciyGHuzcCtbGZZdhXbwsOpiYbf6NWOblWJ0VXHYTACxEkHvkGHCVR2rRe01Gl03wIqfK6Dh%2F7Bqk58pRS7JNi7cUvdGcAtT2uqHHzrVLu9zST4fT8Uc\"}]}\r\ncf-ray: 9e7160d7aa85723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71034,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"5347d180eeca88c1fa4d115fc28a59fb","sha1":"360388d0475500aa77ad0936e63ef3ff1f855af9","sha256":"7a7bfef8fcbc0a05177395d16d4c02a6a9c152d07d580f62fe96683de0f0e79c","sha512":"0940912914ebc57c184f43e2bd0f01b1f537146cfcf28f24f8174ab0bb2fd2a50cc1d4757803aa54317e5a32a0e35dd252e7e38bdf785ba5dbe1d46a58e47c1f","ssdeep":"1536:GdnwAhe5Yhik3iArRiBF7IrZrRn+VnqPWxMthbkT+0K:Gd9hemik3iIRiBF7IrZrRn+VnqPWxMtR","tlshash":"7f63ba1de618a27d3c3b51d886fca49d3105f2e0e9ff07e9ed9192209fd36f2096a514","first_seen":"2026-04-04T15:35:10.721098Z","last_seen":"2026-04-04T15:35:10.721098Z","times_seen":1,"resource_available":false,"data":null}},"time_used":967,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":379,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/_next/static/chunks/debd593eff01c060.js","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:38.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /_next/static/chunks/debd593eff01c060.js HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdi-telegram.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:38 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:36:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69d06b38-42df\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wNbBr62t%2F3wUjAwq9f1OgdRYCf1%2B%2BJcNv5VQbzz70AzKeYU8ys77Beccz74IBni8%2F22jz3n0YJ78bVTIdX9DmzmLect%2Fizsu1lFIjlEeEhmDtf%2BX8uSJz991qTCUpvMp4a1D\"}]}\r\ncf-ray: 9e7160d7aa86723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17119,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17119), with no line terminators","md5":"13c921fb37f7066ffbbf78a0e2b3d1c0","sha1":"ae8f0d7c583a01dfb397d67882725978c8c92caa","sha256":"35b27c44c6e99f7831b1c96bfcf6a91ff01579639916b6db0d2647d0b9f6524a","sha512":"6a00fe4446459253c0f0f60197805758d2f94a5badbfc97ae4d6fd5ecaf7f96a00c2a17604d4de7fbbd1c5f8b29580196a2044daf484b4c85b5c4c998b278f1c","ssdeep":"192:ZhUoUQB9k84OONbcjEh048ktYAziKiENjsX4Ki5L/1zC12e68j2prP:V27vBK88kcRujY4p/1zC12eKb","tlshash":"3a72b5ae7195f4911fa364a5803f500bb23929b6286dc0b0e3a2dcf5b8f455dd133f9a","first_seen":"2026-04-04T15:35:10.722242Z","last_seen":"2026-04-04T16:37:52.005563Z","times_seen":2,"resource_available":true,"data":null}},"time_used":917,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":692,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/images/d4.gif","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:39.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /images/d4.gif HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdi-telegram.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1070602\r\nlast-modified: Fri, 05 Dec 2025 09:29:38 GMT\r\netag: \"6932a602-10560a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pK8nXY4byEaz3e1PbH3t0ljslL0SqohRo9RuPK10PKwYstOvUsmsu1QUKEAdZbxMemJgFLDqKbrgrANnYJ4CVqrVVKi%2BhS%2BoYzpZjWl1dK7oPVSCMaYcxU750bu9leRZ17c8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7160de1b36723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1070602,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"66cb51f6b7e81b9368d065eeb5450218","sha1":"4cca1a6e7a5b0632c2218f15e43bf0b0e86ff877","sha256":"8a360143ec0e3185561d9f325b99fdb12c57ea0e306977c171cf27b7db5586c3","sha512":"c55886ff901804c194cc43e234c7545d780d383d1ed3d78a6c7ea583c5ec0bcfdbb96c85b3d2a71fda2ee49fb96e5d11a05559111bb9592cf07a8bace316ecaf","ssdeep":"24576:isjGYeRoVIB/zDcSJWgAPySCrVC81XgCWZM:zReiVUcSEtPYVC81XgJM","tlshash":"3225acaf4b9257989571db241cc4268b84d7c4b63f313cf98fb21962383127e2e3a935","first_seen":"2026-01-09T07:29:13.314176Z","last_seen":"2026-04-04T15:35:10.723179Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1884,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":628,"receive":1256,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/images/d5.gif","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:39.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /images/d5.gif HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdi-telegram.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 641458\r\nlast-modified: Fri, 05 Dec 2025 09:29:38 GMT\r\netag: \"6932a602-9c9b2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yFuNRTEGcedJXeLN%2BIuqFzRj8WI760nnCrG6WJohRBDxxhkiOt4cUIc4soVUkC%2BGACcMudZk1ao6BN46pgpADFFoX2usfGioOXB5k3WRWsADgpTGOOurE0RNDDCD5eeWTTL7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7160de1b37723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":641458,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"b2324dcb75ae33e7fe710ed07a8127f5","sha1":"17367acb6370ac5d036834a920b89f0da71971bf","sha256":"1fd63f6b3d884239ce64b76e4a6bf20c2681ac84b08110db82d7f9403ce87de3","sha512":"b96c57399352187f0ee0182828c3aafc40f772a0dd1e2dc6014a5eac7717b0d40e55740abb766097ed9b53c98b2ef6231a586d952cfae91c9413d47d8c45d5d4","ssdeep":"12288:ZXrf2gObs4L5jvl95tVR6SbB3wCNdKVFGSkUS1PyWlh8mgng3P9syGaaiznDlvd0:t+gOdjz55QFGSk1AWfggfOZsznDllWZ","tlshash":"86d422ef9e5d871ec18065f03c7f083d897a5d515c426366a6c3b3348d86daee3a281b","first_seen":"2026-01-09T07:29:13.3196Z","last_seen":"2026-04-04T15:35:10.724523Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":688,"receive":1143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/images/d7.gif","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:39.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /images/d7.gif HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdi-telegram.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 779127\r\nlast-modified: Fri, 05 Dec 2025 09:29:38 GMT\r\netag: \"6932a602-be377\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bQqkk7oDly%2Fw2S59NfMK5IVymBHoPB%2BUYDXJMJL%2BHa%2FWWN%2BsaLJIsA1JnScn5W%2FmyihJe0ry5M4hK7b5EDV1X8cNSA4j5G4kEhLQ6617MXHg352m7Pukym4V91Y%2BVn90hDQ8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7160de1b3f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":779127,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"b7f16ba7463211aa4817d19dceba94ad","sha1":"057748a6a0e8cd1adb705c345151f0db1ee3a6b6","sha256":"bb22f329c3ca59d94ba39e39e486a3e8c2649abc667811c1e85746259acf3265","sha512":"5d624a6de715e6aa236755aa74cb9efcd8ceb8a751149c112f24a26073b6ed8ec910053f7b63f554096d808520c9dac6382efac12e21f9e5c84716203f14b011","ssdeep":"12288:/46o4cU/uiQydbxTBdYWckPix7ZdAkJ+dHlqHCEuBh/FpB9XpCRhgpXxNAT9+oVS:/46dcMu3yBkkPix7UkaHlqHTuBh/nXZH","tlshash":"e4f42313ec3d99cf080a79758d2e174f5938858db680572368a2f4a9fe025ddc2ef897","first_seen":"2026-01-09T07:29:13.34015Z","last_seen":"2026-04-04T15:35:10.726139Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1052,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":841,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/contact/__next.contact.__PAGE__.txt?_rsc=ufrug","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:40.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /contact/__next.contact.__PAGE__.txt?_rsc=ufrug HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /contact/__PAGE__\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:40 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hXBqH4gmBxSOecA9Hbp%2BMXA%2BK3CAysJCxnPWTKdcJ0MrFfzqRf%2F1bAYVoGkRFlV7pjDCHP2XbuwltqoxoVfC1hWeoOKx7cJt8ALF0XwPq%2FzBsiiV16My5I7yApaOgyji4b0m\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9e7160e8ecc5723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-04-05T04:45:44.840229Z","times_seen":4063,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/about/__next.about.txt?_rsc=uudir","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:41.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /about/__next.about.txt?_rsc=uudir HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /about\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:41 GMT\r\ncontent-type: text/plain\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:36:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69d06b3a-1b0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WPsUqYD4Qe72VsLTxtCIdnnY5jfxMy78CIHsC21Gcxzh9RUfg2ArcqjQbW7ZkK9JhPIoWbngjqg%2FVUINuFUNLGvqK5jAwVQYzWRXdhuAvG0AkC1yM6RfqmJ9poRlVMSCDnlq\"}]}\r\ncf-ray: 9e7160ea4ce1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text","md5":"2a6eb6e76ab4d3c95ba226150841452a","sha1":"bc7ee849c253e61a80f5ad0e89397257ee395fdd","sha256":"599ede0bedf202f50940c98920661ef0b109b22662d9da45a763b9e1eca8a628","sha512":"8ed620c3258806c26587bbcd79c4da45a44b13a9547984933f140229113ad0c79048b36072df6d905721da78bb502e7964e562f02c9838990f938b65737093cd","ssdeep":"","tlshash":"e8e02b66a50aed273ea98c0c006d531b65bf883b55711cb4d29ccd8c03a063a07ce9c0","first_seen":"2026-04-04T15:35:10.727586Z","last_seen":"2026-04-04T15:35:10.727586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/faq/__next._head.txt?_rsc=1pn8p","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:41.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /faq/__next._head.txt?_rsc=1pn8p HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:41 GMT\r\ncontent-type: text/plain\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:37:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69d06b5f-558\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=93Msx1H0xvD6qibbnh%2F60y5bsQsI1cqKGEPTn%2F4qilET6SQEoZXAodrIAaN66kUi80aBqUXIEvaRglsPdlLIAzdbO%2BttoCI10V6BrWN9enVDcFKNoSINz8apJms0Fs5Qo0y7\"}]}\r\ncf-ray: 9e7160ea4ce4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1368,"size_decoded":0,"mime_type":"text/plain","magic":"Unicode text, UTF-8 text, with very long lines (889)","md5":"fed1f89280675c32ba5d0342f116e555","sha1":"213a24c7563a38e6c8f80fd6ee1830936a7cfce4","sha256":"dd0c3216a1ee2e6447053d6c3f300631a5892e6b6fa70511aa9a00a37b99fb7d","sha512":"cac2c4539de4e618c2729a8f468620bf10db100cdb1f15e1ea0af5255694ee479c18193471d20c726e0aa963a17d1c56c6d2d6c89354f880df7196199103fe03","ssdeep":"","tlshash":"c221c17d9a09ec1f3ba7895d005bd31ea27ed23787782db5c14ecd1903946251f891d0","first_seen":"2026-04-04T15:35:10.728441Z","last_seen":"2026-04-04T15:35:10.728441Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/_next/static/media/83afe278b6a6bb3c-s.p.3a6ba036.woff2","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:38.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /_next/static/media/83afe278b6a6bb3c-s.p.3a6ba036.woff2 HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48432\r\nlast-modified: Sat, 04 Apr 2026 01:36:56 GMT\r\netag: \"69d06b38-bd30\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=85xwsBlDjypdiliDUBhO5%2Fv2Jor8UTc%2BFtaGxk5JVMFl%2FptTSUUfMqUrSDVxLtB2H1OYIV5k0hW29%2FA9nkHReyRjBE1gBhdh4d%2Bcz79ijBoMLisBqKaaA4K0Csqgd6ScHM1h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e7160d7aa84723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-04-05T04:43:15.598034Z","times_seen":34634,"resource_available":false,"data":null}},"time_used":1104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":670,"receive":434,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/_next/static/chunks/f8c0db758fb27563.js","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:38.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /_next/static/chunks/f8c0db758fb27563.js HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdi-telegram.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:38 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:36:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69d06b38-36d08\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1dxs6wIiMuz6642HSTaQI7UOcfAAZIVYgP%2BrgZBHYUp%2Fg5qijljgtkXG104hiBq1Ed6iV2OyEMlzymkUhs1XsWw4Yt79QxdUHtzyrM09fIfot2hJiIBFuYrGtijSzBxJpCar\"}]}\r\ncf-ray: 9e7160d7da91723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":224520,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"61c1daea776ff7b1d68ae7dca3cd3aaa","sha1":"dd6b805b5ccaffec05d57e6b6df9903104ebaa7e","sha256":"503c1ce491b504248a5bb3e74d111ffa4e3af4b047810498ca518130a290aadd","sha512":"fc7a4d91ad5a45176fad8e50af31e26774a097d44f0b359aa2002280c0feaf0e3516fea5099d1deddb1229e38c410377ef232613d60e87142a33b3248059d564","ssdeep":"3072:Ze1jSp2U0Ri4qi8xP/ykf4HTj6mN6Ubtv9Y:ZeJSp2UklH3xNbtv9Y","tlshash":"b4240be83955f6626ab302a710af1803733c292b280d4d60a251fdddb57845fb17bf9e","first_seen":"2026-01-09T07:29:13.298458Z","last_seen":"2026-04-04T15:35:10.729893Z","times_seen":9,"resource_available":true,"data":null}},"time_used":1501,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":650,"receive":851,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/_next/static/chunks/9ba3e27b1777c1d1.js","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:38.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /_next/static/chunks/9ba3e27b1777c1d1.js HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdi-telegram.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:38 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:36:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69d06b38-89e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iSGuxnysIN6sdnfuAcrS%2F41ECoySOltHZ1BxvRjxSjtNwp9z4phsdOwngV%2BHLlKp%2BMwewY%2B44q6N1JvzFMWsS6qQsKhrSyWfDUo43M683tw8Za2y2IV5rY24mDaEc9895tY2\"}]}\r\ncf-ray: 9e7160d7ea99723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2206,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1856), with no line terminators","md5":"87ae3d824fe61807302767bdeb020920","sha1":"c60ed3ed605bed42341d80ba1ff9dd806a4e7663","sha256":"539de4a8352c68dcb35d4a5a606578fd0b8c6fd0aa93831e86315f01edb75da4","sha512":"c482e4f2ddd51a9ca72f37cd1d0e05ad3de18c5bbc1477ca4a137f4a33b65187decb15aa8012c75869b8c9cf1d8030aacb2cba7deae10df950deeab54c31a613","ssdeep":"","tlshash":"ca41e3202b40f9ccb83758bd6c6dd1289039874dd6efc5686b7ed02106a16f8ea73767","first_seen":"2026-01-26T09:05:53.328536Z","last_seen":"2026-04-04T15:35:10.730925Z","times_seen":2,"resource_available":true,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/faq/__next.faq.txt?_rsc=1wljb","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:41.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /faq/__next.faq.txt?_rsc=1wljb HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /faq\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:41 GMT\r\ncontent-type: text/plain\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:37:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69d06b5f-1b0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Y8%2Fgk4mou7aRdExxxmepBfOo8Ld8%2BwzBA2D9e0zOu9LDMqSdQKbyKxiEjI90KEGcdWtfeALDWLJjvFpTIWyE0BvqL36VoemnsR3TNhhzyQEN%2Fr4JOne6QsDNQn2dYIvyFSA\"}]}\r\ncf-ray: 9e7160ea4ce6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text","md5":"2a6eb6e76ab4d3c95ba226150841452a","sha1":"bc7ee849c253e61a80f5ad0e89397257ee395fdd","sha256":"599ede0bedf202f50940c98920661ef0b109b22662d9da45a763b9e1eca8a628","sha512":"8ed620c3258806c26587bbcd79c4da45a44b13a9547984933f140229113ad0c79048b36072df6d905721da78bb502e7964e562f02c9838990f938b65737093cd","ssdeep":"","tlshash":"e8e02b66a50aed273ea98c0c006d531b65bf883b55711cb4d29ccd8c03a063a07ce9c0","first_seen":"2026-04-04T15:35:10.727586Z","last_seen":"2026-04-04T15:35:10.727586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/favicon.ico","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:41.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdi-telegram.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:41 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:37:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69d06b5f-3aee\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7nPPf7RRchC8bWx8AFipMysaFltAaVqiXqKOwG%2FNlLFKlPDaxf4tV3CCOL%2FIJX8minGTvPe52MDZDgLliZ0PjB4xlYggSWU5%2FVJ6d6Q8k1oTH%2Bq6Rrq657YESRHJhVL8rvtw\"}]}\r\ncf-ray: 9e7160ebad22723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"5791d664309e275f4569d2f993c44782","sha1":"a68f363153614a09f10ae2892c134b9c4b001d4b","sha256":"4ff54bc38c267dc3a8c95f6ed4590336baaec70433ef15d027ddca608c391e78","sha512":"93502a68f14fd4f87e0aa2cad92a5657a8587e6acb1c108ccd8ceb5e52776e77df867962c51e1290316bb78027da636f38c065294871b4400fbbc4dedf622ee1","ssdeep":"96:jJkRRRRRRRRRRRRRRRRRRRRRRRRRRRRutRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRC:jJ/1MJNF6m9XC801f6x7QJGp18G2QR","tlshash":"246280540644ce31ceb2867e164fb8d002275e7de03c6c59ceeaf47b02b99f2b696539","first_seen":"2023-06-23T00:57:51Z","last_seen":"2026-04-05T00:43:06.386756Z","times_seen":298,"resource_available":false,"data":null}},"time_used":858,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":646,"receive":212,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/_next/static/chunks/aa0a7c5c022cbeb9.js","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:38.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /_next/static/chunks/aa0a7c5c022cbeb9.js HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdi-telegram.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:38 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:36:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69d06b38-980c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=npL4UCk%2Bj%2FcRfnUYOIWZG8z3Z4r8v9401hrX6scMq%2FClwjlLJe%2BvgoZO3WbB6Wk5F9h7fGGF1Clk6zBDDLo2wlTeXSJZ43toEr8845xoe%2F5kuZaCSwUXJ%2FAT3bNw61HkIFCw\"}]}\r\ncf-ray: 9e7160d7aa87723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38924,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22713)","md5":"1e79b1926473efc64178602f8682d563","sha1":"4c36c924f6467d150d457037eeaade15fac4095d","sha256":"a32cfbfeb00a7e262808bf7665f4cdd076d8fc1fe6321b0be01c97c9d7692bd9","sha512":"9d0faffcfdcc2b33d949a535dcbb42a6dbae9ceafde2fd8a51c9757f6a9b9f6ab07d2f600d0312fb4017b770c47731afa5c833ed8104186c167ffaf30999403b","ssdeep":"384:SjpjDvCaRAzb0mUYTOVF35o59D5qgg9BkECoeZoPUR+2lwQmbnxxtw6ZR:BIPr3K9D5qgg9evXZoPUPorH","tlshash":"d803b6b672d4f9a2139340e0843b2017f2290c76116d7570a7e4ccebb6588dda6bbfd9","first_seen":"2025-12-28T17:37:42.733635Z","last_seen":"2026-04-04T16:37:51.980545Z","times_seen":143,"resource_available":true,"data":null}},"time_used":1139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":691,"receive":448,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/_next/static/chunks/0122bb27ffb6a1be.js","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:38.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /_next/static/chunks/0122bb27ffb6a1be.js HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdi-telegram.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:38 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:36:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69d06b38-1ce12\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fnYHSczG9ywK52dGFtFY0hYQA2%2BW3xHpf8RLppwgsIPJOmv4AQB2Y%2FEPoyVgC6e%2BLijvwES3I82K5jXJRCEySmzOe94wfiY6bKlTjrz1wJdJXTa08YHPFd0BKYrGT%2F%2FIKhT%2F\"}]}\r\ncf-ray: 9e7160d7da92723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118290,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7ab73ddd73fdd9f59898213a6b465fab","sha1":"0b34c03146ce77503f7d472fdc8e3bff6d68d30d","sha256":"acbb28e5d5e7f451d3e3012a38d411635dbf8e105234670581434a10d19cb331","sha512":"1d8ea7ddbcea35e65032c11c3087f677764738ef9db7aaa6c79f7d71589a9b06bf0cee26a9d3db03a2e6212fdab8d028ab1792d22c1e90fce6961dee3c7dd587","ssdeep":"1536:8s+IHdrBQKCpaR7IjUbzW9nUJTs3O7/rzib+aFivi:1vCEGjUO9qs+va+aF","tlshash":"93c3f7f935d5f48207ab40a6c03f0006f32d4d77189e68a0a3e5ddda746499de1b3faa","first_seen":"2025-12-31T19:15:39.940143Z","last_seen":"2026-04-04T16:37:51.92931Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":612,"receive":598,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/_next/static/chunks/turbopack-883eea257e2d74a0.js","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:38.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-883eea257e2d74a0.js HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdi-telegram.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:38 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:36:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69d06b38-280a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nx2e0KsLkEhuxcnHFg%2F6lTcQWoMwXssJ4ayopGzmbIi4pfL1deoqzVtv4e685kzZekxpZCiU%2Fdv67sTTQPe71ZErbw388vPg%2Fm9ffpVSvblGHVcMwOGXzGgmtfKr%2BHzQwNSJ\"}]}\r\ncf-ray: 9e7160d7da93723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10250,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6411)","md5":"7c431c2398af7811dd14c39cdcaa044b","sha1":"f7ac3b274eb107832396a013973cc7ba8ce5dbb4","sha256":"f86a15d45369394879945ce4d4df8e24d8add3293a0c69110cee203d62123d9b","sha512":"d6104ff7cb5cf099976b5db040751b7a0e9616e33e03e62689da396131d24d1749a377e9c4117da254cd1b980d65daad4e70f039fd099a38e884e16bc35bda34","ssdeep":"192:yspVl08/EsUnUj5EGdoFNplHda6Mh60W9xocxkUk1MsS:yspVvXIblHA2VroQZ","tlshash":"c622d6da37a6f077436fa1e6807f0044f17944a8145d582c93aca8fa38394ae49e3f67","first_seen":"2026-04-04T15:35:10.733935Z","last_seen":"2026-04-04T15:35:10.733935Z","times_seen":1,"resource_available":true,"data":null}},"time_used":868,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":653,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/_next/static/chunks/762794f61d142af8.js","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:38.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /_next/static/chunks/762794f61d142af8.js HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdi-telegram.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:38 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:36:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69d06b38-6bf0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z3gnupqIsnCdiGpcPOkZT6%2B%2BsRqD50viy2qrL5giQh1IfPjTAUv1F4J2GtT37DDOQwM%2BoiDPfSchMMGa1EI04rlg3TvlO4WG1sDVXFAc9PZPxSO0esQIW5bbhMjrJBkFiz4b\"}]}\r\ncf-ray: 9e7160d7da96723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27632,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12306)","md5":"87e015d29aef8515d2f53f57e0ba811c","sha1":"695c780207e73e3223fc9760028a8cd8d89100c9","sha256":"b1ec577872a7a171c4cce57a8e0b41acbabf95c1a969f63341fadd54860e1c27","sha512":"d4062bc63a989bb34d4168d9e761b8cc7e31890016fd6e4df68d139ce292f53fee52520c15494020212c7f5e7c5f0197e4f5a6ac90c3a1c6a9cce1b1fd7429db","ssdeep":"384:XLWCnjdQkmGQuYrJ9Jr28TBObgu4g9YzkD9zlGlEA342y/lIE0w0Old:XyCnjikmuYFFTu99YCGlC6w0Old","tlshash":"bfc22ca531e5f8d6539b81c4843f000df37a0d75645eb0a4b3e99cea7960948e1b2fba","first_seen":"2026-04-04T15:35:10.734766Z","last_seen":"2026-04-04T15:35:10.734766Z","times_seen":1,"resource_available":true,"data":null}},"time_used":859,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":646,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/_next/static/chunks/ff1a16fafef87110.js","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:38.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /_next/static/chunks/ff1a16fafef87110.js HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdi-telegram.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:38 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:36:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69d06b38-11a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FkhhgTaldyKL0Q8zDlJLWfDtcrPs9umkMUMfG2uUergS79Dj9Rvtj0KBrp8tbtrXwO2bmAU5GHYq6PNQWqtUOHnmnvjtssMbrndNY1OEh4MKhf51kOeB5eoutYMK1dULPdbG\"}]}\r\ncf-ray: 9e7160d7ea97723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"5458632ee5cb3da028baebb11d5f70dd","sha1":"57e264834d3635e52fbbd3d93135842c09ce8525","sha256":"e9786b1305894e4119bb9811a816dac9cf576755596dd989ee15b455749fc35e","sha512":"28ae4e3a3828f99d64b7d4bfc7238d56c9ad910ce267dcb6c01e53be00c88f8a7f024640680d2bd66240a9972322744ee9147883a12ff8c92717c27ebb3fef50","ssdeep":"","tlshash":"63d02b702150f8d84086a4cc8836424bf52928b262fe3895d7ae8cb16174f0c51e1e55","first_seen":"2025-08-20T23:30:20.185011Z","last_seen":"2026-04-05T04:59:37.780571Z","times_seen":15347,"resource_available":true,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":586,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/_next/static/media/favicon.431f97f2.ico","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:39.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /_next/static/media/favicon.431f97f2.ico HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdi-telegram.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:39 GMT\r\ncontent-type: image/x-icon\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:36:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69d06b38-3aee\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BsFpSRa6S5ExbnlfMh3j44XkcM7C72BiHP9gOjx%2FPpqU%2BKYzE9f9fI0T691RBTFM%2FMHVXqsJNQyk8RSNrRD%2FQ3kVvZqv3J602E4ThVE1BJG%2BPfIYTQCFSgnBf1RY4%2B8s6S7j\"}]}\r\ncf-ray: 9e7160de0b31723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"5791d664309e275f4569d2f993c44782","sha1":"a68f363153614a09f10ae2892c134b9c4b001d4b","sha256":"4ff54bc38c267dc3a8c95f6ed4590336baaec70433ef15d027ddca608c391e78","sha512":"93502a68f14fd4f87e0aa2cad92a5657a8587e6acb1c108ccd8ceb5e52776e77df867962c51e1290316bb78027da636f38c065294871b4400fbbc4dedf622ee1","ssdeep":"96:jJkRRRRRRRRRRRRRRRRRRRRRRRRRRRRutRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRC:jJ/1MJNF6m9XC801f6x7QJGp18G2QR","tlshash":"246280540644ce31ceb2867e164fb8d002275e7de03c6c59ceeaf47b02b99f2b696539","first_seen":"2023-06-23T00:57:51Z","last_seen":"2026-04-05T00:43:06.386756Z","times_seen":298,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/images/d3.gif","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:39.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /images/d3.gif HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdi-telegram.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 483392\r\nlast-modified: Fri, 05 Dec 2025 09:29:38 GMT\r\netag: \"6932a602-76040\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zLHTlCntM17GX8HMbUCMN%2BbG6ty8OPZgh60FcQ5yWYcbZvBmrGi0omJacBhF6zKVmZsyK81rhwVQ%2F868as34%2BMJbd1Be68uqlAHNqFFwhdEUQpJzjnly6HBk11%2FV%2BsgW1TgS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7160de0b35723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":483392,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"aba6bdda52e8295e92a25ce3d3c1be5a","sha1":"e60bd4f65beb63d8acbd138eb149e8a114529a36","sha256":"6a0d42a7519184f7ac58127e7514335d847429b1fc1a20143bb59dd47ac53ab2","sha512":"f72f97c5a818789ea1a1133be4d0cfb4184bcee769baf13de68fa953670f7a7c562b1f6020edd8eaf629591e8add5d0488da6ea04e5f19e84bcb3b56a61f4305","ssdeep":"12288:65D5ZGB3zV9yPYcZ8cPdojsALCDAZa+4tTLvg+Wc6ZJBx:MD5ZS3zV9ygcZ8+doeAZa7L76Zrx","tlshash":"d7a423b1a83824a604bf39f2a073174e03be5564a1f689b29361bd6e3c1534e91fcdd7","first_seen":"2026-01-09T07:29:13.311794Z","last_seen":"2026-04-04T15:35:10.736122Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":968,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/download/","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:39.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"HEAD /download/ HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:40 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 04 Apr 2026 01:37:35 GMT\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fxw9%2FtKpo7yxNVUIFSFoP%2FO8pwCN3OthtFqEQA8Uj3afNi%2FbXA2DH4i%2B9cDr%2FZnGWkE%2BajYR6u0UpkwiPOjewalV146b1yC7euW0Z5TP2YttkHYChXjt7Lb2kdZv64sxgvoG\"}]}\r\ncf-ray: 9e7160e1dbba723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T15:34:37.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 15:34:37 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Apr 2026 01:37:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vkLCmnA7RNSysLV5A84fb8xmPqqB9AJWZfc0vj3Uz9kHchb6UTagxhnW9aw0iF15hRsbUjPzM7dJaiyH4hyLpubfnVHAcFcfmTZLcbWiw2fbmszZL%2FTtEk5i0H1dH10B8xtO\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9e7160d28d8ca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51519,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (48297), with no line terminators","md5":"e3c067e1f2121f9aa2105d25c1194241","sha1":"02e3b4f64a60ebbf5ca35be132cdbf930003ef7a","sha256":"22c39755f41679aad26049cda9b7cfb1abfd8766889b0cf28403ebb98f9fe030","sha512":"9d43399a222315163406238515e91df9add032737c6ffcf5efaf0fa0c6fe05f887c1d1d99ec4656440f8b828f8c21022462f036073416df4c92b015c35e54a22","ssdeep":"768:hFsOfwBDiQNTD1XbPCNGzcqRjDgg/Qkm92Qk+2hwYrhtaFt3+L:wBzbPCNm","tlshash":"d4337438b145dd6dfc5b5e6a513ebd39109ec26bca47ed98d2d8c92143838386b93ec0","first_seen":"2026-04-04T15:35:10.737475Z","last_seen":"2026-04-04T15:35:10.737475Z","times_seen":1,"resource_available":true,"data":null}},"time_used":828,"timings":{"blocked":72,"dns":54,"connect":1,"send":0,"wait":684,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/images/d1.gif","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:39.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /images/d1.gif HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdi-telegram.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 531670\r\nlast-modified: Fri, 05 Dec 2025 09:29:38 GMT\r\netag: \"6932a602-81cd6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z5%2FEFfWId%2B%2FiW2ZAIilJhjdP9zwNXjm%2BxlJpvn0WE4mM3VvF%2B0jt1xTI4%2FFLtfeXrFC5EDX%2FyzHiy1Ipv6SpKHdHJtOhj4cRcAyWJIJeQPlaSpo0HxpOaNcrWGdpuNRI9Ifp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7160de0b33723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":531670,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"7b6780500b2cfdba1778d8bb5ae17bfe","sha1":"f8db5b6de3beaa4c6a73c257bf80019763f85e5f","sha256":"c751632793bdcf52ed899ba24b09ceccb78c2b24b892f270bd4b1866556efd48","sha512":"4c7caf7280caa0a11f1461ffde15d379914267a0890193a94990b5ebe759c7fbc67b65fd406cfb358ee15d1ef7354404b8332b4264d6a114d0ee914bf8ac89ea","ssdeep":"12288:MmhosgveI4mk5e6dpEFA5Rmmwwq9ylOlmrv5NpqbBDEUt:M4759pEFAvmmjqAQGnpABo6","tlshash":"f0b42303822d098e0438f8b6b0bf6bd807f912b4bab7911754d8ed7c99853dad4dd0b6","first_seen":"2026-01-09T07:29:13.310376Z","last_seen":"2026-04-04T15:35:10.738192Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1736,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":654,"receive":1082,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/faq/","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:39.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"HEAD /faq/ HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:40 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 04 Apr 2026 01:37:35 GMT\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lW%2BCBBtznmNRhdGx3Z440%2Bakv8uRCMMZmghJe8Ki7OktCmjxusTjiLfpXIw0v0JPgY34eezF%2B3Qp2YwFXQu7CkH5H2fL%2BDSG4qOpRZTfyoseSCgcs%2FJkcetmsEktSOjNtRxT\"}]}\r\ncf-ray: 9e7160e1dbbd723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/about/","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:39.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"HEAD /about/ HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:40 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 04 Apr 2026 01:36:58 GMT\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zpJtJc2Doh6wtEtS%2Br39tKg9NphhLa5rNtRv3xysobX6ttp3uwqGf%2F5RTR5HZPPJVE2tzYaebA4rh4YOWzGiF36byUC41HB2gNklS5CInRhDTTDf7EUgQGIC9j%2FovYqkSHSE\"}]}\r\ncf-ray: 9e7160e1dbbc723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/contact/__next._tree.txt?_rsc=1r34m","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:40.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /contact/__next._tree.txt?_rsc=1r34m HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:40 GMT\r\ncontent-type: text/plain\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:37:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69d06b5f-248\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OtlH4r5YyTnokfKg9DEvhikOgPJpVexXaGXimw%2BDLoQtBNCbEr%2FKI1LlSo2UrAm0dq3V9sbKk184GSoZOpGD2WmfhfffwpV3oc%2FRpX0%2BPUCxeuYfRAhY4GyZMc9vpzDfegLB\"}]}\r\ncf-ray: 9e7160e4bc43723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":584,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (417)","md5":"3f9e946765c59baadd8019d24595a90a","sha1":"dc3b079b4dc759ab94dda9e557657bfcbe466e89","sha256":"adecde6eafebf8a654fc211eaf6fbd391cc7ae35ba821799297355e479adeacb","sha512":"8d1e234077284dc68255d63626db5f8c9cf0e9652ce5aae0943ef2aaaa3e2c21aa2e3604db7c4b66738baa30c5f8fae814a9c58c0e6f0c67215bbe6052cb4cf5","ssdeep":"","tlshash":"00f0f62e9858bd9d58d5988c5298ab0b132cca3bb4a54ca9c48e1c5527af0380e8b643","first_seen":"2026-04-04T15:35:10.738896Z","last_seen":"2026-04-04T15:35:10.738896Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/faq/__next._tree.txt?_rsc=1r34m","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:40.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /faq/__next._tree.txt?_rsc=1r34m HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:40 GMT\r\ncontent-type: text/plain\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:37:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69d06b5f-240\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=se9CvL9oN4nrrzEQy5Xg3gOZykLxRWSToF%2BdGz6BrPwC2j7e2phkccVl92fpuFVbKNgIGRVXZnOd61OHy7CIfNuLVlQgAeSTYIMQjIEAZ%2B4u9CUTOM4Aw8HxO8ATNkHPyGBb\"}]}\r\ncf-ray: 9e7160e5bc5c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":576,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (409)","md5":"68d67710eca98475c91d35040d1f8ca6","sha1":"7405cb0d30d5ba7997c6a74ab9c07df6c4313445","sha256":"38884e1ff7a164f24f6ea4415af76ac913b244912d9b7ca27d39c9a58ef11b9e","sha512":"1f6e55fd0efe55d4e31bf47c10edf23bd54d206aec2b9975c3edaf46c860cb950a2592d67c7fa3653cbbb84e5c46eaacbe932636ae39871eee9e14adf5133b24","ssdeep":"","tlshash":"e5f0211e8858bd9d58d6984c5294f706133cc63b74a54cf5c4ce2c1166af0380e8b743","first_seen":"2026-04-04T15:35:10.739575Z","last_seen":"2026-04-04T15:35:10.739575Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/download/__next._head.txt?_rsc=1pn8p","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:40.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /download/__next._head.txt?_rsc=1pn8p HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:40 GMT\r\ncontent-type: text/plain\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:37:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69d06b5f-5a4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7MDLjW7NIrCEIVg1JNyQqqeaS2x4ZE8SXlNaXGAeSGCGDRrXPOsxF6szR8UEcbCzWUvxjrzVRKzOQDhBWm9%2Bl2qynTdpmlrZY5NSvCd5qMKbt6%2BBL5oQmCtPHYcDKtcsTInd\"}]}\r\ncf-ray: 9e7160e61c65723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1444,"size_decoded":0,"mime_type":"text/plain","magic":"Unicode text, UTF-8 text, with very long lines (959)","md5":"3db1bd1dd03c17ec69f0ee40775f7b46","sha1":"99c333788c355f6facabe36f0ca997b53277e9dd","sha256":"a4d9f22609de4a63b35c28e23dfa223db6ad1c6860791bb5d85984bbacc3534f","sha512":"a497da8d27560d32a5fad261f56554e646caa297cc48135460e869feb343f255bdf3fd865f284de5325c2cbefd8cae08ee7d36e34fb535c6106b2dac23b871e1","ssdeep":"","tlshash":"71311d7a5a05ed1f3fa7899d105fd30aa2bec2378a792cb6c14ece1a07546360a485e0","first_seen":"2026-04-04T15:35:10.740433Z","last_seen":"2026-04-04T15:35:10.740433Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/blogs/__next._tree.txt?_rsc=1r34m","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:40.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /blogs/__next._tree.txt?_rsc=1r34m HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:40 GMT\r\ncontent-type: text/plain\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:37:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69d06b5c-244\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JpkyXN2VgsKcwV4%2B7BV30iS4UKL2IClEyzWJRTMQw%2BvDJ6gkDActqkONCxHKvFRgoF%2FWzSW%2Bh7juzuskBI43RPgAo5vrUCOmbMSM5%2B6FO6fYrIkQhZvvFMQjNnmtRcgr99Wf\"}]}\r\ncf-ray: 9e7160e76c9f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":580,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (413)","md5":"5e4cd52ae41dd58141aa1332f9c5eb98","sha1":"9856cf5662893ab278ff1c7a61db1aa95aefdeaa","sha256":"9bf237041908d262cefaf9073846040f38fbc80aa6e407760d3a4ab6354ce3c5","sha512":"bba3201823def7060514e13efe4ee3fae67d14bd738bff67bbc3d3c4945b9ac133fcdb5dd2c902c5f64dfc563179381aec8cffaaff0186f582a4fcf99ccc790a","ssdeep":"","tlshash":"17f0f62e8858bd9d58d5988c5298ab0a166cca3bb4a54ca9c48e1c1126af0380a8b647","first_seen":"2026-04-04T15:35:10.741364Z","last_seen":"2026-04-04T15:35:10.741364Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/about/__next._tree.txt?_rsc=1r34m","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:40.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /about/__next._tree.txt?_rsc=1r34m HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:40 GMT\r\ncontent-type: text/plain\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:36:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69d06b3a-244\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3cCtJIVxfGr6gGCNnwsCmUi51R38eOKHlGR0IYcA5GuFxSrEmg2P5V41%2Bud1NhqFmZtS0vfhXngnBbn9WzsOkrDgywcJFU4o7RxRjtZUAGc%2BdBicUGkBOJLD%2BZuaFW7nHvHy\"}]}\r\ncf-ray: 9e7160e4bc44723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":580,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (413)","md5":"2c0ef47dc4897ff9161fd282ddba06ca","sha1":"df4735dd2dcb13de235e8b35d2948085581ad70d","sha256":"6c8025ec1b2a2c989c77ec1d1633d8684d0ae1fa2168fbe844842fab402b52b4","sha512":"4a5a15bd01b5c40debc1408850df4b2aab0e428de31884ea222ba81e090c6eb2a93332ace302ec8189ad579d154c8268f5cfd93a2af8bfadad9a85820c5c66b0","ssdeep":"","tlshash":"80f0fc1e8858bd5d54d5994c5294a706122cc63bb4a54ca5c48e1c1127bf0380a8b643","first_seen":"2026-04-04T15:35:10.742174Z","last_seen":"2026-04-04T15:35:10.742174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:40.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:40 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 04 Apr 2026 01:37:36 GMT\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bNFR1OxR%2BL256Fw6JV6ICZqoLLACz%2B0zJdhSoT%2Bykexh%2BBTJRUZl0HAqvYL1fO47mWlcbi26pT%2Fy0r0zdOVpW%2FdkUC6HSwjMxEPAWOCErlWbVkqNDbtyht%2BUSqnQkav6zW5Q\"}]}\r\ncf-ray: 9e7160e61c64723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/download/__next.download.__PAGE__.txt?_rsc=172b3","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:40.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /download/__next.download.__PAGE__.txt?_rsc=172b3 HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /download/__PAGE__\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:40 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lG3gSUKpitTI3M0VNY1%2Fi5DGq0yOZx6jIBKTwFX8aPZY9%2Fl73xzX9gIdrW0i%2FS6AWdNwIs3D%2FxuqULLsujTwBa8q1ydmpCdMIe%2FvfUhqhWPRgyloxrc%2B4hSNh2h%2Bi4Mtr0bv\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9e7160e78ca3723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-04-05T04:45:44.840229Z","times_seen":4063,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/contact/__next.contact.txt?_rsc=1399r","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:40.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /contact/__next.contact.txt?_rsc=1399r HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /contact\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:40 GMT\r\ncontent-type: text/plain\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:37:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69d06b5f-1b0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i9543%2FCMgu7%2B2O3GQJHRCwN%2BIyatkx5FIP6Ab0clJ0hWbNnj1QtjjRTNuSXbvZU2%2BoG4lrbA5M0H42UjBIc8Zo9SNmmn74WBwozE1MBAdX7E4wqXnyLtTuwmbdDnJgW64vir\"}]}\r\ncf-ray: 9e7160e8ecc4723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text","md5":"2a6eb6e76ab4d3c95ba226150841452a","sha1":"bc7ee849c253e61a80f5ad0e89397257ee395fdd","sha256":"599ede0bedf202f50940c98920661ef0b109b22662d9da45a763b9e1eca8a628","sha512":"8ed620c3258806c26587bbcd79c4da45a44b13a9547984933f140229113ad0c79048b36072df6d905721da78bb502e7964e562f02c9838990f938b65737093cd","ssdeep":"","tlshash":"e8e02b66a50aed273ea98c0c006d531b65bf883b55711cb4d29ccd8c03a063a07ce9c0","first_seen":"2026-04-04T15:35:10.727586Z","last_seen":"2026-04-04T15:35:10.727586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/blogs/__next._head.txt?_rsc=1pn8p","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:41.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /blogs/__next._head.txt?_rsc=1pn8p HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:41 GMT\r\ncontent-type: text/plain\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:37:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69d06b5c-52c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B50qdQ9ABDZonGKJgFEcesI3%2B%2BuvrgU2oHQMtPHFGMBDHYGIIrhtliDIry%2BHGRJjTN%2FyE0MNMRB1b0W%2BdNHXeRuKUHSCTF7nMujsdnqNwsctRYgH7Gj3Gbs3ZSus%2Funsefgs\"}]}\r\ncf-ray: 9e7160ebbd25723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1324,"size_decoded":0,"mime_type":"text/plain","magic":"Unicode text, UTF-8 text, with very long lines (865)","md5":"4c38827c998eda1862ee9e7113029e12","sha1":"b670a8e5c2ba0f56090e774e24daa81eeca7d024","sha256":"6d6f0f97bffa2b5acfb9fafba9d820be54e41785f287846f302ba082cd709ac6","sha512":"67cdc14ee3cc8a9d65b1165e09865f7fe419a4fd15dfa71c7b46a2583d3fe7cbb37376af22e9475d81fbae9a775330aebbb7af3fc30a9e740da272a3c6e930fd","ssdeep":"","tlshash":"4021f33e5d09ec1f3f6b895e009be30f62be863b46b41db5810dce1903956361f455e0","first_seen":"2026-04-04T15:35:10.743032Z","last_seen":"2026-04-04T15:35:10.743032Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/blogs/__next.blogs.__PAGE__.txt?_rsc=qn0i0","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:41.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /blogs/__next.blogs.__PAGE__.txt?_rsc=qn0i0 HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /blogs/__PAGE__\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:41 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=80S%2BXacMX35ekpwGkXCvccX8NYTYUCxUkUCWi8RZKzHScwx796gL0s%2BqFgN4cmIc%2Feao1Vpgwik6STnqtN6TOkf4rK6Y5Hhs7UPlor%2FLeSaYOmAaDLSnKL7tI54Zd7zB%2FOfx\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9e7160ebcd27723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-04-05T04:45:44.840229Z","times_seen":4063,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/images/d9.gif","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:39.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /images/d9.gif HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdi-telegram.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 700198\r\nlast-modified: Fri, 05 Dec 2025 09:29:38 GMT\r\netag: \"6932a602-aaf26\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Nk%2F%2BVA%2FQ7lsVvM5AovnqqSx2xvGrLSf2mTM5Bo0l36JZerNtJ02HXMdOascwj1GYrGSrvJ%2BM%2BsQgo8yztowb0XV8eJvquNkSKwIeDQr%2BWy80MCckkgXvv10Obv%2BWZ3BYneo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7160de2b41723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":700198,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"618796825c21ad15fa3b4ba8a3967161","sha1":"f732edc2a22563de0397337b770ecb212a805c09","sha256":"7cb0c4b24edb2aa0c71b6aef656d60ede79b12f1de9182e33eed2252aaee43fb","sha512":"1ca7106c0529710e74ed6937132c94cacccd2623857a1d475ef18aa8660b1fda84026111b5dbea56c3b6ac0cde1ec5e920e039f0b00cddb7d9238c20463cdafa","ssdeep":"12288:DJzY45uQd+rdC2gAuZYVLSXhzu4QEqEnCCbb5J5fWtHC4NgqOwB2gna:VE45zd+eZYgXhzT3CCbFHKHC4ueBlna","tlshash":"3fe42303413884cfc0ad3ae1d512f75166f88544c89ae59386d4befa2edb6cae1f59c3","first_seen":"2026-01-09T07:29:13.340955Z","last_seen":"2026-04-04T15:35:10.743905Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1563,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":981,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/images/d8.gif","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:39.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /images/d8.gif HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdi-telegram.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 635688\r\nlast-modified: Fri, 05 Dec 2025 09:29:38 GMT\r\netag: \"6932a602-9b328\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iUHVZFWjsMHPk4676yhSMYQZEL05ldW7g2MtN057hRhg3kqFVMbRPjpjjRc4cKv6CgUkchToUixq2GrjFJi1dir8sQ8I6t8Io0tfpDx2CkIWHJM8gwBAYfxeIwxDskE6Y4cp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7160de1b40723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":635688,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"f8a5ad4880b55bd935761a61b20654f7","sha1":"c1f8c7b5d2c367c601392e795ad58affaf1a9680","sha256":"0f8cafc9cb36f476e9fa475bec3195555a0f8ac552edf9b15108b3ddefb5f157","sha512":"78dfc1c3c5246228642074fd376a1dd9606c0f37d3e48b07260fdd13df71dd67ba1f1362aca604417d98db13fc35dbf07097ac59e255fec9cace695c79f060ce","ssdeep":"12288:/ZXvt92t00OP0Iku1vwwmYpSkdcCBg+qJao5QZCNR3ORTlwlJLPuUE:/Z/tU03v9mqVdK+aao6ZpU9WL","tlshash":"c5d42317e3add8c8481ebeb0411b57ca51ba08f4c8b5642a166dfd4cda805df90bc9fb","first_seen":"2026-01-09T07:29:13.303635Z","last_seen":"2026-04-04T15:35:10.744773Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1697,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":637,"receive":1060,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/download/__next._tree.txt?_rsc=1r34m","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:40.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /download/__next._tree.txt?_rsc=1r34m HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:40 GMT\r\ncontent-type: text/plain\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:37:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69d06b5f-24a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aaoPNH9Xeg%2BqZqfO06T4CiNGQnOdDmvKaFkT%2BLSjYUE6CmLxHLTybD%2BulEvrWZmutaTQmMXh1CMQUaME%2F2%2B6hnNgKS2heEqdk3GeTc4Nkc3gDb4dw9Rx0S31tW8qR5nOKLTJ\"}]}\r\ncf-ray: 9e7160e4bc45723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":586,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (419)","md5":"d3b1a4c942ad725accfa18db5b8b059e","sha1":"19d17c2cc08a9974851e904bf5046353a4706e3a","sha256":"77b3c3c21951c2c2c8bf7dd51e925285565698e34f4a7ba949ac36bc6b03280c","sha512":"d35ac05ed126e9fcbb36549a85ed7f9897d38c278b40d6633dfd6fdc9c55432c205607f9161c76b85f3c9432958cff603292e4db51e9730da750974220d885b7","ssdeep":"","tlshash":"76f0fc2e8854bd5d54d5988c52d8a706122cc63b74a54ca5c48e1c1566bf0380a8b743","first_seen":"2026-04-04T15:35:10.74598Z","last_seen":"2026-04-04T15:35:10.74598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/about/__next._head.txt?_rsc=1pn8p","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:40.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /about/__next._head.txt?_rsc=1pn8p HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:40 GMT\r\ncontent-type: text/plain\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:36:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69d06b3a-56d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=coS8g1b4LNLCcUDAiZyWV1p3WUPO15o6wL47yeXBifgXziFsOhk%2F3peQPLNGDuRVcWRb2Z6cvovrc1OljYg%2BL09YNb4S%2B97eQLi26oWXtBFMniQOrEbS8gNSfTyHjyERMVKo\"}]}\r\ncf-ray: 9e7160e8ecc6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1389,"size_decoded":0,"mime_type":"text/plain","magic":"Unicode text, UTF-8 text, with very long lines (888)","md5":"5e645991fe3a52322f5cd261cb33aaae","sha1":"012ae15848bd862f4fe414ef5fe780e263b08af3","sha256":"a8d571f8ef8082be535c05b1b439e7fafa9423aaaebeeb2929b9b27adf135ced","sha512":"9fbbb8a11dc235ddce1fafd962b868019a899dfe31b863470b654b12121bb0428ca43976254c82a662aa9c168be5858ca5b0d1b0d96d95b50058cd98b2c4d065","ssdeep":"","tlshash":"0321143e5909dd1f3f9b8d58005b930fa2be933b46741cb5c10ece4907846391b446e0","first_seen":"2026-04-04T15:35:10.746645Z","last_seen":"2026-04-04T15:35:10.746645Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/about/__next.about.__PAGE__.txt?_rsc=1pr6k","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:41.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /about/__next.about.__PAGE__.txt?_rsc=1pr6k HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /about/__PAGE__\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:41 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2RUD6Ydkj8rFE3ZYyxm011vCAyW6JPV7ogo4HSxz585sycn7A1ZjgAa6zKxebQb2RfbzQXe9MCk4BeFD57Ln5wKhpw3jUJHiZddvrAnFGZrZajB3%2B6Eo6uZsyQ1uQJl7kKKy\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9e7160ea4ce2723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-04-05T04:45:44.840229Z","times_seen":4063,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/__next._head.txt?_rsc=1pn8p","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:41.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /__next._head.txt?_rsc=1pn8p HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:41 GMT\r\ncontent-type: text/plain\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:37:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69d06b60-5c8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F7LYfxysiuV2bzMfCQBiyDxoj9RbnuRP2Vy159QnDYSsVNvkJMz60EKysvIww8bSantdxassuR9vKIJKK%2FiZlxbacMlsu50dcZQqEyYN0PGR2BV5%2FG1VOsOpDiIRE6ZYEN9Q\"}]}\r\ncf-ray: 9e7160ed0d41723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1480,"size_decoded":0,"mime_type":"text/plain","magic":"Unicode text, UTF-8 text, with very long lines (931)","md5":"2f82d8d29b1ba7942d569d9a3e73f670","sha1":"ddb456adb549987f0ed1c58c5f21ce630a3885eb","sha256":"4500d9fb814da50df3b904f5d730f29c7158206b28c05cb579c9c28d22b75a30","sha512":"cb089695f0204d6e86c9cd5a38c46150c479f267ba41de6d704b61e478ad16d0fd9e134c3a4346119bfae2163df4ebff0293980c2cc86dc8beea2ed10db0e221","ssdeep":"","tlshash":"27312e7d5908ed1b3f77c999004fe30aa2ae823785752db5c14fce1903541261b849e0","first_seen":"2026-04-04T15:35:10.747413Z","last_seen":"2026-04-04T15:35:10.747413Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/images/d2.gif","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:39.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /images/d2.gif HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdi-telegram.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 530588\r\nlast-modified: Fri, 05 Dec 2025 09:29:38 GMT\r\netag: \"6932a602-8189c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k9jtDNtiOEoOMXFUCihpHBxOy3ilm9O8L2as3O0fBVrd24Ft8Sn1Mraes%2Bl95Qt7o%2B2%2FnEdp5qLJznskff5ErPyje1a86hxpMtjrw2qnXK8gxDMU%2FafKWrSuqdGwrA2j14A9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7160de0b34723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":530588,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"d3164a09ac7423a4eba9610255e8c6f3","sha1":"c698b1d792e70f6a986fc347ae2d342c33486fb5","sha256":"8654f80a3e47ca030573edf4d2fa5bab2c1e43497c3e7ee6fc75e49424230d1e","sha512":"e22009942a72370a2ac12ab138ab8581084d37934a7e354f3f4cc3ed88a0c0d8d035a247fc3168030fb84498f2a0f1b9b02c0a769961aea99734f5ac706a20c5","ssdeep":"12288:qd8in1XDCLmeptKp6Sg5U0WekTH+w5fxQkONflaG5KwkSDcOf:qd8i1WLmotK9CCr+wpxQlMG5KlSDcg","tlshash":"a1b4233f83adc78b0421bc79561f4f390e6884a7819ac19a9b58fb5f786504c552cf93","first_seen":"2026-01-09T07:29:13.337941Z","last_seen":"2026-04-04T15:35:10.748168Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1720,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":648,"receive":1072,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/images/d6.gif","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:39.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /images/d6.gif HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdi-telegram.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 582116\r\nlast-modified: Fri, 05 Dec 2025 09:29:38 GMT\r\netag: \"6932a602-8e1e4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rOltuaZGX1aEjvCjPAA5z5L1xQJl87usW%2B0xvMPDsSxU1Pp%2Bn3VrvX%2FMCZwIfDmgGY95yaeKpJkXpmZMVBJX6iXvJYYlB5cX2ZtTpZ91Td3gCxW9Tda2vA9vC6pOsZawhUPL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e7160de1b3e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":582116,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 200 x 200","md5":"c08decb917c0e6b35ce73b318449e1c4","sha1":"84fa4ca720a48e45835a2529fd619a9b17c291ce","sha256":"729bc3366b79c344485cbe6f4b1bc153936a0ea8865030e824cbc25f49e1df90","sha512":"64eed947f450cdb034d34374b3105d14841510b4a6994f66f88813b49b6b4943a72eb053fb893a5724b89eeeb2e7653416d1009324ff1e3337edd6774dc04986","ssdeep":"12288:oqBO/l6BB3zcQHikZqDXChg9t5/0frwc9YYlRgpqjc5:FEs3zNHqeu9tNAUWlzw","tlshash":"9cc412eb026aedced4cd52b5e05bfe9369f4431080869552e8c5f1cdf8c07a885dae53","first_seen":"2026-01-09T07:29:13.339237Z","last_seen":"2026-04-04T15:35:10.749019Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1842,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":688,"receive":1154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/blogs/","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:40.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"HEAD /blogs/ HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:40 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 04 Apr 2026 01:37:32 GMT\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mqs9DMM7YSKj7Bf2xCUme5TrETlL7EH3SiKCZdqGbWHdRRoXHMKsyo9Iuap2XXpMmDWyy8vdBKdN3cPSSLF38snmGyjBllOA9M2RDjwvNXJ4QUCkDDmW2jOTs7NahD3U0Ksz\"}]}\r\ncf-ray: 9e7160e60c62723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/download/__next.download.txt?_rsc=vja3w","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:40.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /download/__next.download.txt?_rsc=vja3w HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /download\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:40 GMT\r\ncontent-type: text/plain\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:37:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69d06b5f-1b0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d645nqlX5s3cDU26L4gelhU6spAFnfa%2Bg%2B67GPnGuFL%2B%2BA%2B72RudLrfkBOB5sgIi7%2BIkBkFcjDE2rPXjOKutb8r%2FcZVaMv9MMDZ8N0dAvLNCfU13AvyP5w1HE7T8KZskO13t\"}]}\r\ncf-ray: 9e7160e77ca1723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text","md5":"2a6eb6e76ab4d3c95ba226150841452a","sha1":"bc7ee849c253e61a80f5ad0e89397257ee395fdd","sha256":"599ede0bedf202f50940c98920661ef0b109b22662d9da45a763b9e1eca8a628","sha512":"8ed620c3258806c26587bbcd79c4da45a44b13a9547984933f140229113ad0c79048b36072df6d905721da78bb502e7964e562f02c9838990f938b65737093cd","ssdeep":"","tlshash":"e8e02b66a50aed273ea98c0c006d531b65bf883b55711cb4d29ccd8c03a063a07ce9c0","first_seen":"2026-04-04T15:35:10.727586Z","last_seen":"2026-04-04T15:35:10.727586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/faq/__next.faq.__PAGE__.txt?_rsc=3lco4","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:41.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /faq/__next.faq.__PAGE__.txt?_rsc=3lco4 HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /faq/__PAGE__\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:41 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2FaZe8aeo4Mmsx2CKbHi8r%2FsL%2Fd8FYFSnfLNKm%2F1eu3%2FkTzCxjpdKeyygGv1P7HQBbnqJGIIwX7D5tPP96JoNml8ow3e22DEMvvALpfaRWq73UVHLRrum9aIham34tHajEpo\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9e7160ebbd23723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-04-05T04:45:44.840229Z","times_seen":4063,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/blogs/__next.blogs.txt?_rsc=1yc2h","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:41.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /blogs/__next.blogs.txt?_rsc=1yc2h HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /blogs\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:41 GMT\r\ncontent-type: text/plain\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:37:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69d06b5c-1b0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Es4G5M45%2F7VHrA5knhAlMau0wbYILJ047cXdICf6MunEcQ9JLn46thYtPs%2FVpVgznbFcgY6qFuBtz2JPc%2BmuIC%2BK23%2BnuJ7MPyrpPIj2dag4bDljRp93MwwmgYurqMOfh5gL\"}]}\r\ncf-ray: 9e7160ebbd26723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text","md5":"2a6eb6e76ab4d3c95ba226150841452a","sha1":"bc7ee849c253e61a80f5ad0e89397257ee395fdd","sha256":"599ede0bedf202f50940c98920661ef0b109b22662d9da45a763b9e1eca8a628","sha512":"8ed620c3258806c26587bbcd79c4da45a44b13a9547984933f140229113ad0c79048b36072df6d905721da78bb502e7964e562f02c9838990f938b65737093cd","ssdeep":"","tlshash":"e8e02b66a50aed273ea98c0c006d531b65bf883b55711cb4d29ccd8c03a063a07ce9c0","first_seen":"2026-04-04T15:35:10.727586Z","last_seen":"2026-04-04T15:35:10.727586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/__next.__PAGE__.txt?_rsc=ivliq","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:41.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /__next.__PAGE__.txt?_rsc=ivliq HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /__PAGE__\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:41 GMT\r\ncontent-type: text/plain\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:37:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\netag: W/\"69d06b60-4098\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2BkceUiSu4c%2FM5WSwcCikXLyUnlQ%2B2ir2OIu%2FzZmudugQAYADcZmUPCy6tAS7kW%2FYgVI%2B5nYJZW01Gff%2BfOVYZKqN4ExYJFfj%2FdLXWizpSVltz3WMeaM7Jm%2Fdji257azqZMx\"}]}\r\ncf-ray: 9e7160ed1d42723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16536,"size_decoded":0,"mime_type":"text/plain","magic":"Unicode text, UTF-8 text, with very long lines (4405)","md5":"3f7ddfbc322b0f8603312eb8699bc294","sha1":"3fed0b389a3430cec75b60540131bd820e1fdff4","sha256":"7bafe105a125b8e3726d5416afbcd94211e6326988d8d795c3f75ef7ac8ea14d","sha512":"6aa3b7cc4c27ff7a1a450e76560948ec2ddd65b8eb7eb9f9d6dc31b8f100d9a75ad391dd56b38b7a4066256198c1d576fef417f59ad01835a0910d8216359034","ssdeep":"192:AcBhS3ZZlANeBpScZYlqy9tZYvhyYMOZY1ycsBO/h6AUl5KD+dh72Ko0qdijPb13:AcrkQ77Vcn5P8yqjSqRbnjqCn4nMA","tlshash":"3672103da3056dbcbe6b4156615fd61a262e823bab876ef6d2fdad3153420306c533c0","first_seen":"2026-04-04T15:35:10.750289Z","last_seen":"2026-04-04T15:35:10.750289Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/_next/static/chunks/7340adf74ff47ec0.js","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:38.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"GET /_next/static/chunks/7340adf74ff47ec0.js HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hdi-telegram.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:38 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 04 Apr 2026 01:36:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69d06b38-77fd\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BmTGbC4MHFMx43RoxNPtPL1S3tZDYhjBmnyj5BlmmLIL2c0pRI82CFgJxzkVXs811gOUvXMYxtwnzQnZ4sp9%2FKdsUD5leCHemzy1J%2FzshCQcwhaXZJR2Et0ZmG5fh67iYkeF\"}]}\r\ncf-ray: 9e7160d7ea98723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30717,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30715), with no line terminators","md5":"07116caaa974183af6252904a1e19581","sha1":"0a3fadd4f5b44a9c2343ad01a1f7a0a008a08982","sha256":"d8e91f5e0c241a7fc0b00a57fbd5398c27b03931244b685e2a703a1947dda34a","sha512":"58be518c26a497b772d6a91a59f38f8ce81252d54245bfe33c373a921c125f88a60bec66c4d4bd3ab4b2a8c1a6d26dfe3bd791218dde95ceadce8edf0a1bbaf9","ssdeep":"384:735S75Bq9E0m1YmRDQ0cJ3tn79Fg/Ag8qWtOPSNsbU:D5S9BX0ZMOx6bU","tlshash":"fed2e8717395f9a352db85d9d03a0015f2290d3530ae24b0b394dcef368dc89a1fafa5","first_seen":"2025-12-20T12:16:43.561499Z","last_seen":"2026-04-05T04:15:23.452806Z","times_seen":848,"resource_available":true,"data":null}},"time_used":763,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hdi-telegram.com/contact/","fqdn":"hdi-telegram.com","domain":"hdi-telegram.com","tld":"com"},"ip":{"addr":"172.67.140.89","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hdi-telegram.com/","date":"2026-04-04T15:34:39.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hdi-telegram.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Mar 2026 07:19:46 GMT","end":"Sat, 30 May 2026 08:18:14 GMT"},"fingerprint":{"sha1":"B3:75:C3:9E:6D:9E:D7:19:98:A4:F5:75:17:11:28:61:AD:C1:EC:6B","sha256":"7A:50:7E:DB:E7:AE:12:AA:44:8A:E1:B3:AF:A3:78:29:33:D3:03:87:3B:2A:66:28:21:D6:94:6B:17:30:E8:24"}}},"request":{"raw":"HEAD /contact/ HTTP/1.1\r\nHost: hdi-telegram.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hdi-telegram.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 04 Apr 2026 15:34:40 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 04 Apr 2026 01:37:35 GMT\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mvnkTQ5ez%2BFsgacajFfczzt7xWE138kuIGlfYXTmneyW71jl%2FpobhCvFKYPn%2F%2FH2lGG7hxEUsmRTAjzjef51uwkukFB6ShDPQMZIFFk1qk6%2FETLtADwEjJgt2RyZECB4186G\"}]}\r\ncf-ray: 9e7160e1dbbb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"hdi-telegram.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}