{"report_id":"63c3b324-7a9b-4ef6-8461-82adef739e8f","version":6,"status":"done","tags":[],"date":"2026-04-19T06:46:18Z","url":{"schema":"http","addr":"tgxlink.eu.org/","fqdn":"tgxlink.eu.org","domain":"tgxlink.eu.org","tld":"eu.org"},"ip":{"addr":"172.67.191.63","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tgxlink.eu.org/","fqdn":"tgxlink.eu.org","domain":"tgxlink.eu.org","tld":"eu.org"},"title":"Service Discontinued - FileStreamBot","dom":{"size":18023,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2570)","md5":"4fb3f15bf61dd61dd128f3dc6f64d9bc","sha1":"72b2e8fc57c571a9498bea4b3bac02ce62d67b71","sha256":"b43244a9bf55cdb9f8d33a729021db27c13c64739e6480fc9513340933966a87","sha512":"5a9c9af542ae8be99c71d4ac93c79a1877f1c0bc8d05e46cef86cdf8936f8656e0cdfec1f962fd66f2ade6d2571f633fc5b7addb7360d8422ae53d16c6bc7d8a","ssdeep":"384:lTn5f5SJROKYWfkLGWkXBBD0XV5JF3vARmuWEouaDFgPYngiMYIphjE:FDgRFYIphI","tlshash":"d9822363a392680b330387dbfa95ba1f5d20e85bec177e04b1fd5658ff29c50106399a","dom_hash":"domhasheae68e1685225328933346615cef1a37","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tgxlink.eu.org/","fqdn":"tgxlink.eu.org","domain":"tgxlink.eu.org","tld":"eu.org"},"ip":{"addr":"172.67.191.63","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-24T06:46:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-19","alert":"Hunting_JS_WebAssembly","trigger":"telegram.org/js/tgsticker.js?31","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null},"summary":[{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-04-15T18:07:20.758385Z","alert_count":1,"request_count":21,"received_data":490991,"sent_data":9328,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tgxlink.eu.org","ip":{"addr":"104.21.33.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":15604,"sent_data":1880,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"oauth.tg.dev","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2019-04-06","domain_rank":373765,"first_seen":"2019-06-09T09:38:14Z","last_seen":"2026-04-12T14:37:17.782981Z","alert_count":0,"request_count":2,"received_data":41602,"sent_data":828,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"t.me","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2010-05-20","domain_rank":146,"first_seen":"2015-06-29T19:03:15Z","last_seen":"2026-04-15T23:14:56.277681Z","alert_count":0,"request_count":4,"received_data":35077,"sent_data":2415,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":2,"received_data":98734,"sent_data":1108,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn5.telesco.pe","ip":{"addr":"149.154.171.237","port":443,"asn":62014,"as":"Telegram Messenger Inc","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":1652491,"first_seen":"2017-07-18T17:59:08Z","last_seen":"2026-04-12T17:58:22.003371Z","alert_count":0,"request_count":5,"received_data":52598,"sent_data":3825,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-04-12T22:43:52.947527Z","alert_count":0,"request_count":1,"received_data":31542,"sent_data":506,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":1,"received_data":5740,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"t.me/SpringsFern/143?embed=1\u0026dark=1","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"467da3068bbe825cc65511e9e71446ff","sha1":"1d6d4ce71443fe50b7eafe871f5e4ff812ac1dda","sha256":"cab2be12ea33a406733ebe1ea5a175e22713108eb378e4e5dd717afb007170b1","sha512":"9bb03c3ad3460aa928a1e06ed9ca130b1d77f805ac23880ee25dc723e439803a7c17b17f2c3f2a28472680d2c1f30e76b054e4143dbf62fe21f56fdb05b279b2","ssdeep":"","tlshash":"f2b09b1005351c5da84f058d23bb694dd4955a755c6515486e1a1db147d84071a55560","size":125,"data":"","first_seen":"2023-03-09T05:49:21Z","last_seen":"2026-04-21T06:07:04.059616Z","times_seen":282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.me/SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"467da3068bbe825cc65511e9e71446ff","sha1":"1d6d4ce71443fe50b7eafe871f5e4ff812ac1dda","sha256":"cab2be12ea33a406733ebe1ea5a175e22713108eb378e4e5dd717afb007170b1","sha512":"9bb03c3ad3460aa928a1e06ed9ca130b1d77f805ac23880ee25dc723e439803a7c17b17f2c3f2a28472680d2c1f30e76b054e4143dbf62fe21f56fdb05b279b2","ssdeep":"","tlshash":"f2b09b1005351c5da84f058d23bb694dd4955a755c6515486e1a1db147d84071a55560","size":125,"data":"","first_seen":"2023-03-09T05:49:21Z","last_seen":"2026-04-21T06:07:04.059616Z","times_seen":282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.me/SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"9fb8c27635edebf0c0f1cdc9412c09be","sha1":"7db554a7a40096adb7491936f952f1d1d0317bee","sha256":"92fbf0d42197e6e5ea83175721763fed7d8eaa17720b07b00ecdf30f31217bde","sha512":"1bdd225b1cef698ed00e7b419d479b30194888f2f04881ab5a899b9d94c501c0f7ff96e4cb44166d1e5a4d908ddb9bddfde13b3ede6b2cb12f5c294c557e1abe","ssdeep":"","tlshash":"bb01ce144ddb01a456b720fd9a1fa70ce4758063b51dcf22321ea2523fa523892edada","size":814,"data":"","first_seen":"2023-03-09T05:49:21Z","last_seen":"2026-04-21T06:07:04.074403Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.me/SpringsFern/143?embed=1\u0026dark=1","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"9fb8c27635edebf0c0f1cdc9412c09be","sha1":"7db554a7a40096adb7491936f952f1d1d0317bee","sha256":"92fbf0d42197e6e5ea83175721763fed7d8eaa17720b07b00ecdf30f31217bde","sha512":"1bdd225b1cef698ed00e7b419d479b30194888f2f04881ab5a899b9d94c501c0f7ff96e4cb44166d1e5a4d908ddb9bddfde13b3ede6b2cb12f5c294c557e1abe","ssdeep":"","tlshash":"bb01ce144ddb01a456b720fd9a1fa70ce4758063b51dcf22321ea2523fa523892edada","size":814,"data":"","first_seen":"2023-03-09T05:49:21Z","last_seen":"2026-04-21T06:07:04.074403Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.me/SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ee83c9932d8020dbf1f81dd0f590be0","sha1":"da16bbeebd9028eca0271200c0b52de657572467","sha256":"5340ed1247bcf19d30674165bb2ba93431871f4a601450a5c9d286ad3e5c33fc","sha512":"ad1115ec33ab33e8482c683c7cc4652c933c12d577eccede169c039946203242c6e09b2791825307c915fe56ea9e208d2f98a6ae332d0cd53d8315334920e363","ssdeep":"","tlshash":"0280000023382000228a2822c00bb2f23280e0003088208088020822c080802222a002","size":27,"data":"","first_seen":"2023-03-09T05:49:20Z","last_seen":"2026-04-21T06:07:04.081426Z","times_seen":734,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-widget.js?22","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ff8b98c72268de58837846f2056c65a","sha1":"e77fcc14f1efd17d319c9f82627e5789333b9dbe","sha256":"0f6cdd09b3bbebf50c4e1679aff6f021f5e183a4ba2dea3a0801394599ff6afd","sha512":"1a680a7e87f16520da934f4034cdc601ebef9c306c7f5e3ea165588f044142cadcf5eb06cefedc8ea7768ff63830586a2776351c7b9429f1e33b639adca5f1ed","ssdeep":"384:+vLsc8o/o9o7IFdWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SU0CF3gLcHPb","tlshash":"2492819e1af72224a567713a4b5fa1093232e163700ddc503e6c5b90bf90a6767b0fdd","size":20469,"data":"","first_seen":"2023-04-05T01:44:44Z","last_seen":"2026-04-21T06:07:04.012257Z","times_seen":2538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.me/SpringsFern/143?embed=1\u0026dark=1","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ee83c9932d8020dbf1f81dd0f590be0","sha1":"da16bbeebd9028eca0271200c0b52de657572467","sha256":"5340ed1247bcf19d30674165bb2ba93431871f4a601450a5c9d286ad3e5c33fc","sha512":"ad1115ec33ab33e8482c683c7cc4652c933c12d577eccede169c039946203242c6e09b2791825307c915fe56ea9e208d2f98a6ae332d0cd53d8315334920e363","ssdeep":"","tlshash":"0280000023382000228a2822c00bb2f23280e0003088208088020822c080802222a002","size":27,"data":"","first_seen":"2023-03-09T05:49:20Z","last_seen":"2026-04-21T06:07:04.081426Z","times_seen":734,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.me/SpringsFern/143?embed=1\u0026dark=1","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"bf742c79ef2b6319a0ba0f5f6635378e","sha1":"422ea531718b80ef20a1cab94c01762790e862c1","sha256":"44d77aa8bb476f06dd71aa220a7d3b5fd6179fb299c7a4aa9c9b35521237c5d3","sha512":"881f62881f99795204479f5590fbf8d61800ee2dbfe6b6ef5ca3cbafe2ef4360bf6d96628e499b404b970e4e6e2347c33add92e8ef24d221cd77c9f1616d661a","ssdeep":"","tlshash":"dde0c0934053d68382fbb6e9aa45c32440972316bc6f8462690c87d814388f858a7279","size":359,"data":"","first_seen":"2023-03-10T07:47:30Z","last_seen":"2026-04-21T06:07:04.08205Z","times_seen":290,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/tgsticker.js?31","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"1400a5f5bb460526b907b489c84ac96a","sha1":"1cdb62d2b39eff966e96a476f72704bc86591036","sha256":"42d42f23d7276824168808093be0f20e3e53673718c79349cc22da88f58d3e23","sha512":"dbb06fc723613a892ac5466d4592839b93cd9504b68e7fafa17827d46404cd7a662d5df04faac08c30c3052958335458301fe9c5b26b1caddd8da914db11cec3","ssdeep":"192:HahNCO9aaOWUbiYyai2kWYipNtUxSi0EBh718jpwyYqaiEjKsnGLUtGrNixayyai:ni1ZGArKPINofFnuefd","tlshash":"29b2ef4d49ab6165a423703dbb6f410632348007790ede30f90de768af9992f16b6fed","size":24604,"data":"","first_seen":"2023-04-05T01:47:42Z","last_seen":"2026-04-20T19:10:05.678528Z","times_seen":1165,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-19","alert":"Hunting_JS_WebAssembly","trigger":"telegram.org/js/tgsticker.js?31","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"tgxlink.eu.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"tgxlink.eu.org","domain":"tgxlink.eu.org","tld":"eu.org"},"ip":{"addr":"104.21.33.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-21T07:33:48.855214Z","times_seen":309263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-04-21T07:33:48.806993Z","times_seen":44985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-widget.js?22","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ff8b98c72268de58837846f2056c65a","sha1":"e77fcc14f1efd17d319c9f82627e5789333b9dbe","sha256":"0f6cdd09b3bbebf50c4e1679aff6f021f5e183a4ba2dea3a0801394599ff6afd","sha512":"1a680a7e87f16520da934f4034cdc601ebef9c306c7f5e3ea165588f044142cadcf5eb06cefedc8ea7768ff63830586a2776351c7b9429f1e33b639adca5f1ed","ssdeep":"384:+vLsc8o/o9o7IFdWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SU0CF3gLcHPb","tlshash":"2492819e1af72224a567713a4b5fa1093232e163700ddc503e6c5b90bf90a6767b0fdd","size":20469,"data":"","first_seen":"2023-04-05T01:44:44Z","last_seen":"2026-04-21T06:07:04.012257Z","times_seen":2538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.me/SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f16ba700e42763b1dbc651de8b4cb76","sha1":"03c71a4ce3f6924eceb704ed8b6dc8b76fb54aaa","sha256":"bf58e033c39cb97402b9e73fb24b6e0c9f441c488977ee31dd279207b1d165f7","sha512":"1a0f492aca25980dbe2180edca49c215be3f94ad29f0596c1e32816aa83346eb51ad2e50597d1aa38608b08c0907154179c5d419d7f612a6b6983beb18b2574b","ssdeep":"","tlshash":"38f02d571293948282fbd2c29a09a71145aa5327fd388114ad8cd2ea24389d148a76bb","size":635,"data":"","first_seen":"2026-04-19T06:46:23.870437Z","last_seen":"2026-04-19T06:46:23.870437Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/widget-frame.js?66","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4825aabfb1129de5a11f9f2377834d9","sha1":"39d76a8d35fa411e0389e1d3a0d4e9000babfc89","sha256":"53df8dbdcd2cc75a317fdbc07e08e2e75e7e25a052fa2ed03871125f67b50001","sha512":"8c4f764301c1d735c6ea364d9cbbb8a399231f83e857b4322ddb615cda594f82aab5c2ff0528938e4ef97243b1c745bc85e94522a9f5993ccb522808ecce1dff","ssdeep":"768:a3+62J1xNNt3p1SG6CwPHG+AIieDPxsyk7Te9vwCiPZZpMEZF5ibQafIw8JBgHAe:+j2jNt3Qsyk7L1ZF8sv7e6M","tlshash":"3f933f4d69f33166a477b17a9baf55093635d003110ece217d0ca394af84934abfbbe8","size":97101,"data":"","first_seen":"2025-08-28T14:01:30.149557Z","last_seen":"2026-04-21T06:07:03.923864Z","times_seen":749,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oauth.tg.dev/js/telegram-widget.js?23","fqdn":"oauth.tg.dev","domain":"tg.dev","tld":"dev"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ff8b98c72268de58837846f2056c65a","sha1":"e77fcc14f1efd17d319c9f82627e5789333b9dbe","sha256":"0f6cdd09b3bbebf50c4e1679aff6f021f5e183a4ba2dea3a0801394599ff6afd","sha512":"1a680a7e87f16520da934f4034cdc601ebef9c306c7f5e3ea165588f044142cadcf5eb06cefedc8ea7768ff63830586a2776351c7b9429f1e33b639adca5f1ed","ssdeep":"384:+vLsc8o/o9o7IFdWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SU0CF3gLcHPb","tlshash":"2492819e1af72224a567713a4b5fa1093232e163700ddc503e6c5b90bf90a6767b0fdd","size":20469,"data":"","first_seen":"2023-04-05T01:44:44Z","last_seen":"2026-04-21T06:07:04.012257Z","times_seen":2538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/widget-frame.js?66","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4825aabfb1129de5a11f9f2377834d9","sha1":"39d76a8d35fa411e0389e1d3a0d4e9000babfc89","sha256":"53df8dbdcd2cc75a317fdbc07e08e2e75e7e25a052fa2ed03871125f67b50001","sha512":"8c4f764301c1d735c6ea364d9cbbb8a399231f83e857b4322ddb615cda594f82aab5c2ff0528938e4ef97243b1c745bc85e94522a9f5993ccb522808ecce1dff","ssdeep":"768:a3+62J1xNNt3p1SG6CwPHG+AIieDPxsyk7Te9vwCiPZZpMEZF5ibQafIw8JBgHAe:+j2jNt3Qsyk7L1ZF8sv7e6M","tlshash":"3f933f4d69f33166a477b17a9baf55093635d003110ece217d0ca394af84934abfbbe8","size":97101,"data":"","first_seen":"2025-08-28T14:01:30.149557Z","last_seen":"2026-04-21T06:07:03.923864Z","times_seen":749,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oauth.tg.dev/js/telegram-widget.js?23","fqdn":"oauth.tg.dev","domain":"tg.dev","tld":"dev"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ff8b98c72268de58837846f2056c65a","sha1":"e77fcc14f1efd17d319c9f82627e5789333b9dbe","sha256":"0f6cdd09b3bbebf50c4e1679aff6f021f5e183a4ba2dea3a0801394599ff6afd","sha512":"1a680a7e87f16520da934f4034cdc601ebef9c306c7f5e3ea165588f044142cadcf5eb06cefedc8ea7768ff63830586a2776351c7b9429f1e33b639adca5f1ed","ssdeep":"384:+vLsc8o/o9o7IFdWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SU0CF3gLcHPb","tlshash":"2492819e1af72224a567713a4b5fa1093232e163700ddc503e6c5b90bf90a6767b0fdd","size":20469,"data":"","first_seen":"2023-04-05T01:44:44Z","last_seen":"2026-04-21T06:07:04.012257Z","times_seen":2538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/discussion-widget.js?10","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e46943185bd4e3e39908c87c9ae3d8dc","sha1":"9682b5e18ec9a6c8bcfddd9a56ccada3517f2e44","sha256":"c9baec5407af6f2d5dc68956eff5494d83f9ef45378a66f1329cbb4bf47bc633","sha512":"0fea8bab3d7f312a6b4271398ad8a996b9499bc2e3318967593615305425a17810b760222b8d0115d92cce2f4e0d5f4f842e57ea771734d5ae6003a78e1490ea","ssdeep":"384:eyUEqdlgeNe9rLn08Aw/mCOZwli8bNqXjUcrF197xM3mp/e5eVb:xBFeNe9Pn9mCOZwlL+UujdxL/e5e9","tlshash":"1ae2784d1cf728b25167f2394faf021d733aa20ba10dce147c0c46646f54aa566fbbe9","size":31959,"data":"","first_seen":"2023-05-20T12:05:36Z","last_seen":"2026-04-19T13:03:36.959876Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdn5.telesco.pe/file/NDRhEGsyPb3fJ5IdLkXcrUxwu8yFs2esoiZVUrElMgFtp_QhZEVTLgTM6G-pkovpg4q6vQVIJFZ3fjyQvk09mN8_KejamV3XyIIBZsyCm0uZJBw6LmSfWnng-YYUlq50JKeq1xg-bFq4PASuvgPD3fdfNOrItePWn5mMUd7YuvaDLbJYcDzHQnk5oAv0WhxchGNvH3nBHjaetIqqfIpyHyHNSuo8i4UOs3VAy2ro7v6Q_MlN6QrMZHSC_ZQrIT2hNt7_diU4Uu3md9W_p_hMgZA8S1Uue0h526e0z2zX78pnCedcCyec2ODEVq9-MHuDqEaI8cW2p2VGwtqU8zlOAA.jpg","fqdn":"cdn5.telesco.pe","domain":"telesco.pe","tld":"pe"},"ip":{"addr":"149.154.171.237","port":443,"asn":62014,"as":"Telegram Messenger Inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1","date":"2026-04-19T06:45:56.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telesco.pe","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Tue, 11 Nov 2025 15:14:08 GMT","end":"Sun, 13 Dec 2026 15:14:08 GMT"},"fingerprint":{"sha1":"C8:B7:EE:0C:41:13:71:AA:B4:69:B4:2B:EE:EF:79:F2:1D:49:37:9A","sha256":"2E:8C:0C:6F:B4:A0:E5:EB:6D:C5:3E:78:51:7B:E3:75:51:D5:DC:6F:95:AC:5C:68:4F:BA:09:91:35:E0:3D:2F"}}},"request":{"raw":"GET /file/NDRhEGsyPb3fJ5IdLkXcrUxwu8yFs2esoiZVUrElMgFtp_QhZEVTLgTM6G-pkovpg4q6vQVIJFZ3fjyQvk09mN8_KejamV3XyIIBZsyCm0uZJBw6LmSfWnng-YYUlq50JKeq1xg-bFq4PASuvgPD3fdfNOrItePWn5mMUd7YuvaDLbJYcDzHQnk5oAv0WhxchGNvH3nBHjaetIqqfIpyHyHNSuo8i4UOs3VAy2ro7v6Q_MlN6QrMZHSC_ZQrIT2hNt7_diU4Uu3md9W_p_hMgZA8S1Uue0h526e0z2zX78pnCedcCyec2ODEVq9-MHuDqEaI8cW2p2VGwtqU8zlOAA.jpg HTTP/1.1\r\nHost: cdn5.telesco.pe\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16357\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'none'; sandbox\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccess-control-expose-headers: Accept-Ranges, Content-Range, Content-Length\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Sun, 19 Apr 2026 09:45:57 GMT\r\netag: \"b58728268972e0bdfa4bd7a3b58455605a755d10\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16357,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 160x160, components 3","md5":"efe5e6a9d670873c4a7216e9e4f77ac6","sha1":"bc82c2572c6ac1240eca840dc2bd53a395ef289d","sha256":"f6d4a1159691988af14138579285228f433a14a9b1a5fb279c4b9a0993d632b8","sha512":"8807c8aa4b8dd6bb51f746f0c8c940e37e8ad205130185699f4e043adf1a8a45f0d0b6391407db58f1be34dca7f1cc36796ad0eec271d5ed9570df478eb894a0","ssdeep":"384:+9cFO1sbHtn6M82YeCCikrFTNouxAhMPYcwRrr:+iFO1sZAdANz9iRrr","tlshash":"3a72cfba3a25c542c5062d6dcc4a630bab86363f82f3f251710da39e2cc0e259654ff2","first_seen":"2025-12-02T04:33:08.358325Z","last_seen":"2026-04-19T06:46:23.836751Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1326,"timings":{"blocked":445,"dns":3,"connect":172,"send":0,"wait":437,"receive":1,"ssl":262},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/tgsticker.js?31","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1","date":"2026-04-19T06:45:56.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/tgsticker.js?31 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 29 Mar 2023 11:31:32 GMT\r\netag: W/\"64242194-601c\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24604,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"1400a5f5bb460526b907b489c84ac96a","sha1":"1cdb62d2b39eff966e96a476f72704bc86591036","sha256":"42d42f23d7276824168808093be0f20e3e53673718c79349cc22da88f58d3e23","sha512":"dbb06fc723613a892ac5466d4592839b93cd9504b68e7fafa17827d46404cd7a662d5df04faac08c30c3052958335458301fe9c5b26b1caddd8da914db11cec3","ssdeep":"192:HahNCO9aaOWUbiYyai2kWYipNtUxSi0EBh718jpwyYqaiEjKsnGLUtGrNixayyai:ni1ZGArKPINofFnuefd","tlshash":"29b2ef4d49ab6165a423703dbb6f410632348007790ede30f90de768af9992f16b6fed","first_seen":"2023-04-05T01:47:42Z","last_seen":"2026-04-20T19:10:05.678528Z","times_seen":1165,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-19","alert":"Hunting_JS_WebAssembly","trigger":"telegram.org/js/tgsticker.js?31","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn5.telesco.pe/file/K4GuPOvTeahAWnMiapZlxdWM9a_I-scRr0-WjnzonreAzZStb3i1VmxQosIGVnceCkFmYD-KWLE82jvm6_z78G4e4ebgnOVxu-80AH8vg07YynUsXFZbhgS1JhPpUuEq3Avvtd7WdMo3xLni8hk4dCHxK5n6xeU1he9Gcpp4phpZXSHnAQvro26510AS5QGr4FnOF-Nv5ZWE7J2nHulKW1KBHv3qkofnTBtP7ISaCs0A_2dBfBlQFLm7HVLsIu9j1KicMKhnHOnlAV8ybbIFmnoVI3YIdqnjqXqOWh10Lvusm0gHzqVAk2MmzS-JNoGPMD31RKkoEiEIXR9WuIK03A.jpg","fqdn":"cdn5.telesco.pe","domain":"telesco.pe","tld":"pe"},"ip":{"addr":"149.154.171.237","port":443,"asn":62014,"as":"Telegram Messenger Inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026dark=1","date":"2026-04-19T06:45:56.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telesco.pe","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Tue, 11 Nov 2025 15:14:08 GMT","end":"Sun, 13 Dec 2026 15:14:08 GMT"},"fingerprint":{"sha1":"C8:B7:EE:0C:41:13:71:AA:B4:69:B4:2B:EE:EF:79:F2:1D:49:37:9A","sha256":"2E:8C:0C:6F:B4:A0:E5:EB:6D:C5:3E:78:51:7B:E3:75:51:D5:DC:6F:95:AC:5C:68:4F:BA:09:91:35:E0:3D:2F"}}},"request":{"raw":"GET /file/K4GuPOvTeahAWnMiapZlxdWM9a_I-scRr0-WjnzonreAzZStb3i1VmxQosIGVnceCkFmYD-KWLE82jvm6_z78G4e4ebgnOVxu-80AH8vg07YynUsXFZbhgS1JhPpUuEq3Avvtd7WdMo3xLni8hk4dCHxK5n6xeU1he9Gcpp4phpZXSHnAQvro26510AS5QGr4FnOF-Nv5ZWE7J2nHulKW1KBHv3qkofnTBtP7ISaCs0A_2dBfBlQFLm7HVLsIu9j1KicMKhnHOnlAV8ybbIFmnoVI3YIdqnjqXqOWh10Lvusm0gHzqVAk2MmzS-JNoGPMD31RKkoEiEIXR9WuIK03A.jpg HTTP/1.1\r\nHost: cdn5.telesco.pe\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12178\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'none'; sandbox\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccess-control-expose-headers: Accept-Ranges, Content-Range, Content-Length\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Sun, 19 Apr 2026 09:45:57 GMT\r\netag: \"e965261c9bd04ed78b07a8c6d8531178908443cf\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12178,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 160x160, components 3","md5":"91c5e0358a32debe0e12c3594151eaa1","sha1":"bf1e5bc8eba0788c1b56f23548bf688148091451","sha256":"b9d8f324086cbfda8fc020e099fe555dc2bdd2344ed50ed19140a98f1adcad1e","sha512":"d9aa607111c28dd12e724335002846cbabac7c8ba907a323f601f65a61dfb32b76175ac886e0ee98341f698e24cc1b6cd03f86c8be8b828d973893ebcd102bea","ssdeep":"192:6xczkrn4bhXx2kqTyhkoOXHJCBK97gR5MUA5kKvw+AIgr1wetbQJhXAm0OsXK01Q:CczXbh7OXWK97kucprmetsTXAm01XKGs","tlshash":"cb42cf390b88a92ff1b6e934ec785737fbd82c238434381e3a10e74596568c01248ead","first_seen":"2025-12-02T04:33:08.361213Z","last_seen":"2026-04-19T06:46:23.838254Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1183,"timings":{"blocked":401,"dns":10,"connect":170,"send":0,"wait":365,"receive":1,"ssl":234},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026dark=1","date":"2026-04-19T06:45:56.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://t.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11028\r\nlast-modified: Thu, 20 Oct 2022 11:05:33 GMT\r\netag: \"63512b7d-2b14\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11028,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 11028, version 1.0","md5":"1f6d3cf6d38f25d83d95f5a800b8cac3","sha1":"279f300ca2cbbdf9f5036ef2f438607fbf377daa","sha256":"796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f","sha512":"716305f4d2582683b64c61b5e2390983579ea0fb33c936dd3ea8362872176625fbcb6f5ad18d2abf85da82d14c33a9640dfc5749922cb2fc079ddf37864f361f","ssdeep":"192:4oijUxKA0B3BxJPeLrh00JWNhi5A5HWdZ6SfroKthzwbMcYfQKvwpFVX2T+:Nx4bexHAE6STltlwbMcovaET+","tlshash":"9032cf5eaa417172974b5791e296fbc0e627186438fb02fef85185bbc4045e437092be","first_seen":"2023-04-05T08:50:36Z","last_seen":"2026-04-21T06:07:04.036986Z","times_seen":73621,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/widget-frame.js?66","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1","date":"2026-04-19T06:45:56.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/widget-frame.js?66 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 12:46:06 GMT\r\netag: W/\"68b04f8e-17b4e\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97102,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3713)","md5":"c4825aabfb1129de5a11f9f2377834d9","sha1":"39d76a8d35fa411e0389e1d3a0d4e9000babfc89","sha256":"53df8dbdcd2cc75a317fdbc07e08e2e75e7e25a052fa2ed03871125f67b50001","sha512":"8c4f764301c1d735c6ea364d9cbbb8a399231f83e857b4322ddb615cda594f82aab5c2ff0528938e4ef97243b1c745bc85e94522a9f5993ccb522808ecce1dff","ssdeep":"768:a3+62J1xNNt3p1SG6CwPHG+AIieDPxsyk7Te9vwCiPZZpMEZF5ibQafIw8JBgHAe:+j2jNt3Qsyk7L1ZF8sv7e6M","tlshash":"3f933f4d69f33166a477b17a9baf55093635d003110ece217d0ca394af84934abfbbe8","first_seen":"2025-08-28T14:01:30.149557Z","last_seen":"2026-04-21T06:07:03.923864Z","times_seen":749,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tgxlink.eu.org/","fqdn":"tgxlink.eu.org","domain":"tgxlink.eu.org","tld":"eu.org"},"ip":{"addr":"104.21.33.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-19T06:45:55.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tgxlink.eu.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 14:00:40 GMT","end":"Sat, 06 Jun 2026 15:00:25 GMT"},"fingerprint":{"sha1":"81:AE:68:1E:AF:6F:52:68:73:5D:0B:AA:AB:E2:D2:27:ED:D8:11:CE","sha256":"33:54:CD:8C:1F:F1:71:8F:F5:6F:C8:ED:9D:7E:4A:45:96:48:0B:E9:6B:F6:A8:9E:E4:1F:17:4E:A7:3B:D2:D2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tgxlink.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Apr 2026 06:45:55 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KFyk8IFl89CY7g28YYQQGp4c%2Bw1SMA5fxjTKwf2zEzVAWr0XsfOMCRWBrDQhGO%2F%2BCUcXwfnLivLQlZI3j46UGrYHIS%2F8%2BsxxxRunYSEY3Nos%2BTmPiQVsgupxGci%2F2T3G5Q%3D%3D\"}]}\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=7,cfOrigin;dur=242\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ee9f2ff3cdbb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":5934,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (617)","md5":"a03b168478677d68cea43e77fc1a1471","sha1":"743bc3a933b7b969d0afbe7affc2703def64388d","sha256":"d998cbafee23f8f4dbbe6b2d46ee4b74fa1ecd064433c043b82728bfb88ebce5","sha512":"d7eb2e72e4eb4fee4de04a0d8eec68fcf136f1ab5676ccd2796dfefb5c5da21b71306a6b3a48024f902065595d76493bfd3441086cbc6aaada6567f3fdfb8bc1","ssdeep":"96:/vvBvcPJD81wJ1H2DnuhwiE2f6c2cicHFBHjY7qKc0ZLtKKqUq:/vhWD2tuhwiQGiOTM7trl0PUq","tlshash":"dec1d697a7f300461642a1ae9aa2b328b763f05bc84cedd63a9dc10cef451659db334d","first_seen":"2026-04-19T06:46:23.850498Z","last_seen":"2026-04-19T06:46:23.850498Z","times_seen":1,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":63,"dns":43,"connect":1,"send":0,"wait":254,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tgxlink.eu.org/","date":"2026-04-19T06:45:56.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 18:57:25 GMT","end":"Thu, 16 Jul 2026 19:57:22 GMT"},"fingerprint":{"sha1":"AB:25:45:8F:55:B6:2B:26:B5:B1:EF:90:E0:60:64:9C:56:47:0F:B5","sha256":"47:83:31:CC:5E:02:0E:51:A7:52:AC:83:1B:8A:A8:4C:74:11:A5:F1:61:8D:C5:6D:29:3C:9D:6A:C9:29:AF:7F"}}},"request":{"raw":"GET /beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tgxlink.eu.org/\r\nOrigin: https://tgxlink.eu.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.2.0\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9ee9f3022e481a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31169,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-04-21T07:33:48.806993Z","times_seen":44985,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":7,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tgxlink.eu.org/favicon.ico","fqdn":"tgxlink.eu.org","domain":"tgxlink.eu.org","tld":"eu.org"},"ip":{"addr":"104.21.33.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tgxlink.eu.org/","date":"2026-04-19T06:45:56.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tgxlink.eu.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 14:00:40 GMT","end":"Sat, 06 Jun 2026 15:00:25 GMT"},"fingerprint":{"sha1":"81:AE:68:1E:AF:6F:52:68:73:5D:0B:AA:AB:E2:D2:27:ED:D8:11:CE","sha256":"33:54:CD:8C:1F:F1:71:8F:F5:6F:C8:ED:9D:7E:4A:45:96:48:0B:E9:6B:F6:A8:9E:E4:1F:17:4E:A7:3B:D2:D2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tgxlink.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tgxlink.eu.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nlast-modified: Sun, 19 Apr 2026 06:45:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aLwmAItNeTgxzQSgWvPZNuM%2BqrZBD5j%2B1hBH9L%2F3WVOftuUppPqWgiMEaQImVMU1RgRpinqZFceD81cTTnD%2BPHdIKgybMnQ%2Bc%2BeBgfOJ1rYX2FYvQlRelGQHC46F5RDidg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-ray: 9ee9f303fbc60731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9f2cb8f6c406f4ec4388d2ae4b758b27","sha1":"7e46d7adc9ad1a9c45d4d4d2388dc3004ea55e61","sha256":"82ec8d6b3b438e0b0ced3422625ceb4018d051b8e04a4a5f689c3ae1c9ad0f6f","sha512":"c7511271f3d87b3aac7fb3a73ad20c0de8b3533aef5c171be2bfc31220503853dc25574ddedd4724d0123a5978c3c89c7c7936189027b92f60c7293ce6de7128","ssdeep":"96:/vvBvcPJD81wJ1H2DnuhwiE2f6c2cicHFBHjY70Kc0O:/vhWD2tuhwiQGiOTM7XrO","tlshash":"52b1c797a7f700461601a1ba9ea2b328b353f04bc84cded63a9ec10cef455a59db334d","first_seen":"2026-04-19T06:46:23.851973Z","last_seen":"2026-04-19T06:46:23.851973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/css/discussion-widget.css?13","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1","date":"2026-04-19T06:45:56.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /css/discussion-widget.css?13 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 08 Jul 2025 12:40:57 GMT\r\netag: W/\"686d11d9-75a9\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30121,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1020)","md5":"d6d515bdd03c971ecd224a3de4aab003","sha1":"a1934fbb95ab6469ff98cd7c24523dc04b53bd78","sha256":"3c7217cca95902fb60598afc328ec0dfd8680efc9811a6c74cc5f92c4fa41c03","sha512":"8e55146f38397005d5a9c5d9704e8f2b51e6bbe7ab6ed1f29a1329beb7612c8c829b8f5bc23a4445996f4f0ef9272bb912d0fc0a49ac9dcf9bdd6e3a2a65010d","ssdeep":"384:45cCLEXTbQFRoqSgVfDlvMvTJ9TFz4RFZcT:45fLCTbQFyqSgVfRqTJ9TFwFZ+","tlshash":"1cd23eab0e6998d52017d11d38f2222e1f3c41a1f514de2af7a620187b98fc49e3376e","first_seen":"2025-12-02T04:33:08.345341Z","last_seen":"2026-04-19T13:03:36.95597Z","times_seen":14,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/discussion-widget.js?10","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1","date":"2026-04-19T06:45:56.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/discussion-widget.js?10 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Apr 2023 11:46:12 GMT\r\netag: W/\"642abc84-7cd7\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31959,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3507)","md5":"e46943185bd4e3e39908c87c9ae3d8dc","sha1":"9682b5e18ec9a6c8bcfddd9a56ccada3517f2e44","sha256":"c9baec5407af6f2d5dc68956eff5494d83f9ef45378a66f1329cbb4bf47bc633","sha512":"0fea8bab3d7f312a6b4271398ad8a996b9499bc2e3318967593615305425a17810b760222b8d0115d92cce2f4e0d5f4f842e57ea771734d5ae6003a78e1490ea","ssdeep":"384:eyUEqdlgeNe9rLn08Aw/mCOZwli8bNqXjUcrF197xM3mp/e5eVb:xBFeNe9Pn9mCOZwlL+UujdxL/e5e9","tlshash":"1ae2784d1cf728b25167f2394faf021d733aa20ba10dce147c0c46646f54aa566fbbe9","first_seen":"2023-05-20T12:05:36Z","last_seen":"2026-04-19T13:03:36.959876Z","times_seen":23,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tgxlink.eu.org/cdn-cgi/rum?","fqdn":"tgxlink.eu.org","domain":"tgxlink.eu.org","tld":"eu.org"},"ip":{"addr":"104.21.33.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tgxlink.eu.org/","date":"2026-04-19T06:45:57.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tgxlink.eu.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 14:00:40 GMT","end":"Sat, 06 Jun 2026 15:00:25 GMT"},"fingerprint":{"sha1":"81:AE:68:1E:AF:6F:52:68:73:5D:0B:AA:AB:E2:D2:27:ED:D8:11:CE","sha256":"33:54:CD:8C:1F:F1:71:8F:F5:6F:C8:ED:9D:7E:4A:45:96:48:0B:E9:6B:F6:A8:9E:E4:1F:17:4E:A7:3B:D2:D2"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: tgxlink.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tgxlink.eu.org/\r\ncontent-type: application/json\r\nContent-Length: 637\r\nOrigin: https://tgxlink.eu.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":637,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":695,\"startTime\":1776581155630,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.2.0\",\"timings\":2},\"pageloadId\":\"65e73bf1-f924-401a-8831-5a631c9fa0c5\",\"location\":\"https://tgxlink.eu.org/\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":20,\"domainLookupEnd\":63,\"connectStart\":63,\"connectEnd\":83,\"requestStart\":83,\"responseStart\":338,\"responseEnd\":338,\"domInteractive\":512,\"domComplete\":1962,\"loadEventStart\":1962,\"loadEventEnd\":1963,\"transferSize\":3141,\"decodedBodySize\":5934},\"siteToken\":\"2f409654b5dc492a95aeb2cb927dd272\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://tgxlink.eu.org\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5nkYm%2F5hl00vy1r%2BxWOqoIePdAojXv3X%2FfrpLNxvKhcYhbUuiyIMCbiI8mW2GkIB2iajpWM8MlCj7U2F9PAkt0sicAqwN%2Fezo%2B6IapD6MT%2FiTIsmvwk3VdWUqc95clTUow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 19 Apr 2026 06:45:57 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ee9f30b0c590731-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-21T07:33:40.546984Z","times_seen":14006513,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oauth.tg.dev/js/telegram-widget.js?23","fqdn":"oauth.tg.dev","domain":"tg.dev","tld":"dev"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1","date":"2026-04-19T06:45:56.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tg.dev","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 21 Apr 2025 11:21:12 GMT","end":"Sat, 23 May 2026 11:21:12 GMT"},"fingerprint":{"sha1":"32:BB:6F:F9:C2:4E:5B:5A:98:53:95:04:9A:ED:D5:50:14:F6:47:0D","sha256":"DC:FF:26:27:F4:21:13:A8:6A:21:93:5C:70:FE:BF:B8:A4:71:6C:9A:5E:AD:ED:25:48:BE:82:F4:A0:E7:09:7F"}}},"request":{"raw":"GET /js/telegram-widget.js?23 HTTP/1.1\r\nHost: oauth.tg.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Apr 2023 11:46:12 GMT\r\netag: W/\"642abc84-4ff5\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20469,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (423)","md5":"1ff8b98c72268de58837846f2056c65a","sha1":"e77fcc14f1efd17d319c9f82627e5789333b9dbe","sha256":"0f6cdd09b3bbebf50c4e1679aff6f021f5e183a4ba2dea3a0801394599ff6afd","sha512":"1a680a7e87f16520da934f4034cdc601ebef9c306c7f5e3ea165588f044142cadcf5eb06cefedc8ea7768ff63830586a2776351c7b9429f1e33b639adca5f1ed","ssdeep":"384:+vLsc8o/o9o7IFdWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SU0CF3gLcHPb","tlshash":"2492819e1af72224a567713a4b5fa1093232e163700ddc503e6c5b90bf90a6767b0fdd","first_seen":"2023-04-05T01:44:44Z","last_seen":"2026-04-21T06:07:04.012257Z","times_seen":2538,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":107,"dns":13,"connect":21,"send":0,"wait":23,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oauth.tg.dev/js/telegram-widget.js?23","fqdn":"oauth.tg.dev","domain":"tg.dev","tld":"dev"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026dark=1","date":"2026-04-19T06:45:56.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tg.dev","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 21 Apr 2025 11:21:12 GMT","end":"Sat, 23 May 2026 11:21:12 GMT"},"fingerprint":{"sha1":"32:BB:6F:F9:C2:4E:5B:5A:98:53:95:04:9A:ED:D5:50:14:F6:47:0D","sha256":"DC:FF:26:27:F4:21:13:A8:6A:21:93:5C:70:FE:BF:B8:A4:71:6C:9A:5E:AD:ED:25:48:BE:82:F4:A0:E7:09:7F"}}},"request":{"raw":"GET /js/telegram-widget.js?23 HTTP/1.1\r\nHost: oauth.tg.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Apr 2023 11:46:12 GMT\r\netag: W/\"642abc84-4ff5\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20469,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (423)","md5":"1ff8b98c72268de58837846f2056c65a","sha1":"e77fcc14f1efd17d319c9f82627e5789333b9dbe","sha256":"0f6cdd09b3bbebf50c4e1679aff6f021f5e183a4ba2dea3a0801394599ff6afd","sha512":"1a680a7e87f16520da934f4034cdc601ebef9c306c7f5e3ea165588f044142cadcf5eb06cefedc8ea7768ff63830586a2776351c7b9429f1e33b639adca5f1ed","ssdeep":"384:+vLsc8o/o9o7IFdWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SU0CF3gLcHPb","tlshash":"2492819e1af72224a567713a4b5fa1093232e163700ddc503e6c5b90bf90a6767b0fdd","first_seen":"2023-04-05T01:44:44Z","last_seen":"2026-04-21T06:07:04.012257Z","times_seen":2538,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":6,"connect":20,"send":0,"wait":37,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/emoji/40/F09FA494.png","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026dark=1","date":"2026-04-19T06:45:56.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/emoji/40/F09FA494.png HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 3123\r\nlast-modified: Fri, 01 Nov 2019 00:04:50 GMT\r\netag: \"5dbb76a2-c33\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3123,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"3796f1eb19f24f44721f5b3f52459cf4","sha1":"0d81f72814346a0937e9fb521770a57b32ff0188","sha256":"0f1f320c4ea902a9ec5905ba97d4c4c7aac1f9b599b3d018d85005cbdbf98689","sha512":"1a1e66c30bdbb00db099880c40d7e1423377d8dabd2701f1cc7dc8251525354cadbe961f807b489851afe69c8e668d80eed170328c5faff76f5b6da243024e51","ssdeep":"","tlshash":"81515bc322851a59650e92261e162a2e99b037e04f0eb84a8c6d449deb887402e4bfe3","first_seen":"2023-08-25T12:08:50Z","last_seen":"2026-04-21T06:07:03.979742Z","times_seen":87,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/emoji/40/F09F918D.png","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026dark=1","date":"2026-04-19T06:45:56.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/emoji/40/F09F918D.png HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2087\r\nlast-modified: Fri, 01 Nov 2019 00:04:50 GMT\r\netag: \"5dbb76a2-827\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2087,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"ce8c4276a9abf570a910cdcc8754f335","sha1":"a361b07bcbd5aeb50791c84b7ca83b32df73dc22","sha256":"ad1c2f1120499c9fac2443eb5d8eaa85b630f483fbd2ba8d5dee62c22d06a0b0","sha512":"466808c844b8bf433f88718a1bf665773925809b9cf4d506366cf4e9bb4276c499140dd7740cf79ec0355573b0b833243ea4bf203355d823ddaeec60bb42227f","ssdeep":"","tlshash":"2d413acea10c35cac8b430b3b931348cb8d8548cd6190eaf64d9cfd19604528908f27f","first_seen":"2023-05-26T10:30:23Z","last_seen":"2026-04-21T06:07:04.007703Z","times_seen":291,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026dark=1","date":"2026-04-19T06:45:56.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://t.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11072\r\nlast-modified: Thu, 20 Oct 2022 11:05:33 GMT\r\netag: \"63512b7d-2b40\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11072,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 11072, version 1.0","md5":"e7df3d0942815909add8f9d0c40d00d9","sha1":"cf5032eea3399a58870e8a05e629b006a8c7c3c7","sha256":"bce2f309470952b7affa62ff4d91b454334c68cefa541429b502904d20696875","sha512":"3632a44ee28aec0cf67ef7d3780a18db1aa84837817a3ea69a5f892d656a94b9faefc0314e2c38599410802f875df73581558ee9511ced7f717feda29336cfa0","ssdeep":"192:X+O5i60QYQyX4xOc50jR0ujO1W4qEaeFw1CsfCIRsiFDK5mvuGDP3dJGkWNZuQST:uLyYQ5Oc50+91W45FwRBseDT3fGklt1","tlshash":"6432be0ed131bba7c9fe1c3bae1307b072641e7a11badd6ab200eed5945f5a21c01db5","first_seen":"2023-04-06T07:37:44Z","last_seen":"2026-04-21T08:13:19.53593Z","times_seen":10343,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/css/font-roboto.css?1","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1","date":"2026-04-19T06:45:56.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /css/font-roboto.css?1 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Oct 2022 11:05:33 GMT\r\netag: W/\"63512b7d-1816\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6166,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c706681409217a14a24c7e2deb8cf423","sha1":"08b443fe5bc6a223a9de08fb56282365b1d13857","sha256":"84b97b3fa8847b64c6d3833561e4b3146530577171e85ad226578a087db70974","sha512":"2520a5417426cea58972529b3776713958ff259cc8467ebafbe291bd040e27195054c4133f4a9518d78da38ddf4f7cdac64da0813da33bbe707ad13af5baa7c1","ssdeep":"192:KR6tGVFJ3qFl5p3AkmztIZa+XqtRcalH9:wTY7t8t","tlshash":"53d18b40485a6000eb871cd677cf7e3abd8e55053042c576effd14a8adebc269368b4e","first_seen":"2023-05-29T15:15:29Z","last_seen":"2026-04-21T07:58:38.888339Z","times_seen":18143,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/css/widget-frame.css?73","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1","date":"2026-04-19T06:45:56.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /css/widget-frame.css?73 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 29 Jan 2026 17:33:59 GMT\r\netag: W/\"697b9a07-162c0\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90816,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2404)","md5":"c6e95ea2283d3a6254e7ef8df6f3aaaa","sha1":"06a194cb861a4b5bc627031915f12fed31f660d5","sha256":"cec1c55246920cf7576237abb8db6ed88df513cb8480702adb607c94c7a7a7f3","sha512":"052fd320e7a8c368719384fb6b86e3aabc9e95221d07ce7d65e7f918dc7f7a5f971ee89ae2e5746e14dd5ed86b2059a505781378bc7018f2485b1e93c842aa8d","ssdeep":"1536:excVvHIy0IZMqj/S1PqvJflMSnAk7Zu/2:bZa+1n9u+","tlshash":"4a93c59f5ab1ad08782bc15b74c5761c2b3c9b87d505ee2a9ed930188f80ed5b83370e","first_seen":"2026-01-29T23:12:50.891319Z","last_seen":"2026-04-21T06:07:03.894237Z","times_seen":301,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/emoji/40/F09F918F.png","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026dark=1","date":"2026-04-19T06:45:56.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/emoji/40/F09F918F.png HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2438\r\nlast-modified: Fri, 01 Nov 2019 00:04:50 GMT\r\netag: \"5dbb76a2-986\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2438,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"155df4cc3bc04efd103d942113552abf","sha1":"b0bb1647401e9576a179df688eccd02b5d943a16","sha256":"5614dfd44a7ce8d165eccc5fe9f24f9963541dafb09fb0bacc2a206b90c1d779","sha512":"9f416c64f677aa7c8c94b390ccb5897e90afb960e4de99940e308fc071ca7e5d9a911ff36e67545bc54a00be4240db990942b14226493f7b29c4b8208594eed5","ssdeep":"","tlshash":"d1412c416f3598909a419e5e5ffa57b41be6102359c5e0eeed107c8831343a71f0e9da","first_seen":"2025-07-19T04:08:10.057655Z","last_seen":"2026-04-19T06:46:23.858584Z","times_seen":113,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/emoji/40/F09FA5B0.png","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026dark=1","date":"2026-04-19T06:45:56.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/emoji/40/F09FA5B0.png HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 3583\r\nlast-modified: Wed, 31 Oct 2018 14:03:57 GMT\r\netag: \"5bd9b64d-dff\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3583,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"e5aee70ef7b139e7a285a08b77768d6c","sha1":"2e4f1d1442e664afd9ddebf683a2ceef31ad9f89","sha256":"f15ae785aa2d9e0895e6c9f7b15f36c8f6f194a7c34a8eb35168fb3c3f17b325","sha512":"7a86a2717a5b76e38b01453f1dfb62f4741cbaaa2f6031ac399e70dbe548fa6cbe80f7b52b65c80ae4026665bbfe1d5a501a72cd04bfb6aa187314abf1042f17","ssdeep":"","tlshash":"60714c423784c6fe9a50227bb55cf9e9628543e84725134271a2d3b4d71efab1c2b193","first_seen":"2023-05-25T19:25:34Z","last_seen":"2026-04-19T06:46:23.859161Z","times_seen":27,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-widget.js?22","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tgxlink.eu.org/","date":"2026-04-19T06:45:56.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-widget.js?22 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tgxlink.eu.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Apr 2023 11:46:12 GMT\r\netag: W/\"642abc84-4ff5\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20469,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (423)","md5":"1ff8b98c72268de58837846f2056c65a","sha1":"e77fcc14f1efd17d319c9f82627e5789333b9dbe","sha256":"0f6cdd09b3bbebf50c4e1679aff6f021f5e183a4ba2dea3a0801394599ff6afd","sha512":"1a680a7e87f16520da934f4034cdc601ebef9c306c7f5e3ea165588f044142cadcf5eb06cefedc8ea7768ff63830586a2776351c7b9429f1e33b639adca5f1ed","ssdeep":"384:+vLsc8o/o9o7IFdWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SU0CF3gLcHPb","tlshash":"2492819e1af72224a567713a4b5fa1093232e163700ddc503e6c5b90bf90a6767b0fdd","first_seen":"2023-04-05T01:44:44Z","last_seen":"2026-04-21T06:07:04.012257Z","times_seen":2538,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":142,"dns":17,"connect":21,"send":0,"wait":27,"receive":0,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.me/SpringsFern/143?embed=1\u0026dark=1","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://tgxlink.eu.org/","date":"2026-04-19T06:45:56.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.t.me","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Tue, 21 Oct 2025 19:17:28 GMT","end":"Sun, 22 Nov 2026 19:17:28 GMT"},"fingerprint":{"sha1":"C2:28:12:7F:8C:B2:D6:C7:3A:96:F0:44:37:DF:F9:9A:E8:C6:84:BC","sha256":"02:29:2C:40:8E:4B:65:6A:8B:6D:DD:92:BC:E3:97:F3:76:D9:86:33:FD:33:51:BF:5D:88:9D:31:57:AE:EE:0C"}}},"request":{"raw":"GET /SpringsFern/143?embed=1\u0026dark=1 HTTP/1.1\r\nHost: t.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tgxlink.eu.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 4712\r\nset-cookie: stel_ssid=4fc5ab92244e07eb90_16364724507839268740; expires=Mon, 20 Apr 2026 06:45:56 GMT; path=/; samesite=None; secure; HttpOnly\nstel_on=1; expires=Mon, 19 Apr 2027 04:16:43 GMT; path=/; samesite=None; secure; HttpOnly\r\npragma: no-cache\r\ncache-control: no-store\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=35768000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18126,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2606)","md5":"2f6771429426a36337164e92860aaede","sha1":"e009ffa1aea1fe6bbf4313a387dc38c275716c80","sha256":"dfb56897ff16b8ccbfc762ab262b80175f9410647b0f25ceb80cf37e3bff940c","sha512":"c97c56835387674ca54ad5fb9e1603f045e999be871ba1f56e9ebfcc601ce2373097c95c3b02b9fe62bbbd6b742925cd75bb53eae4e2ca89fa0970de375258ab","ssdeep":"384:LTn5g5SJROKYWfkLGWkXBBD0XV5JF3vARmuWEouaDFgPYngituIphju:XWgRYuIph6","tlshash":"9e823463a392580b33038bdbfad5ba1f5d20e89bec177e05b0fd5654ff29c50106299a","first_seen":"2026-04-19T06:46:23.859673Z","last_seen":"2026-04-19T06:46:23.859673Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":121,"dns":0,"connect":21,"send":0,"wait":56,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.me/SpringsFern/143?embed=1\u0026dark=1","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026dark=1","date":"2026-04-19T06:45:57.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.t.me","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Tue, 21 Oct 2025 19:17:28 GMT","end":"Sun, 22 Nov 2026 19:17:28 GMT"},"fingerprint":{"sha1":"C2:28:12:7F:8C:B2:D6:C7:3A:96:F0:44:37:DF:F9:9A:E8:C6:84:BC","sha256":"02:29:2C:40:8E:4B:65:6A:8B:6D:DD:92:BC:E3:97:F3:76:D9:86:33:FD:33:51:BF:5D:88:9D:31:57:AE:EE:0C"}}},"request":{"raw":"POST /SpringsFern/143?embed=1\u0026dark=1 HTTP/1.1\r\nHost: t.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 5\r\nOrigin: https://t.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/SpringsFern/143?embed=1\u0026dark=1\r\nCookie: stel_ssid=fb80c78ae3d038ddfc_16314173489007964691; stel_on=1; stel_dt=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":5,"data":"_rl=1"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:57 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 24\r\npragma: no-cache\r\ncache-control: no-store\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=35768000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-04-21T07:20:28.94582Z","times_seen":368922,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tgxlink.eu.org/","date":"2026-04-19T06:45:56.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:9D:A0:A4:A4:3B:62:A3:D0:B3:63:4B:5B:C3:1D:9B:09:43:3C:91","sha256":"DB:10:40:08:19:EF:D7:9C:5F:11:BC:78:DC:9F:81:F3:9E:A7:30:2F:1F:06:C8:C4:A4:DD:BC:C3:27:6F:2A:AA"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tgxlink.eu.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 19 Apr 2026 06:45:56 GMT\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5054,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1a1622f39e9f351ab38999670ba20059","sha1":"4406222602ad0faf8e26423edf040c533bf72b82","sha256":"f0287112ce33d05a0d208d75dd84334092c60e78efbe859c3042c942edad764a","sha512":"1a652ecb2a0ed226e3e3b97c38aac37698b59d5ddee47265aee94c639388cca8fa8737892e94e70bc1415107f572c07585696c77c0f0903dfda9f814a82ca8e2","ssdeep":"96:aOEaNqOEaXFZHOEamOEaO3vOEaBOEaBJc+uTOEaNcNDOxMaNqOxMaXFZHOxMamOQ:9NNIxO34OxDNNryfO3iExlx","tlshash":"b1a18992002ba400ab971dc273cf7f3aaece50856085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T03:23:42.312671Z","last_seen":"2026-04-21T06:15:10.248674Z","times_seen":2975,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":84,"dns":2,"connect":15,"send":0,"wait":32,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn5.telesco.pe/file/Xt9khmICkGw6e_SBLhaWgr4Kcv0XYH6xM0e5I75N-YHCid3OVtJgkSZLvNMe3vSfz1svaj55AcW_1TQVg7bBny-aiSRXRIUewUo3YJy6fWjxYAZSAQYiBFZtZsLmMU0UTzlobxs55MwNPSMbYdU0JfcitzEyztDS9sQwVXhgUm3TBVjGbcroB91LH04QvL1fj4omd9VugUg7qRtIa741FqLrynXSGD7WSMQjqiNZipTwrTQpTbWvHTR87M5MQWFoOd0NZIn7wsWWCO5pc8tEoju2GA4eEu9wP3l-msFhndopASOVA0NMsOFe315ajSWOgURGjme--RMcpfM6rGPEXw.jpg","fqdn":"cdn5.telesco.pe","domain":"telesco.pe","tld":"pe"},"ip":{"addr":"149.154.171.237","port":443,"asn":62014,"as":"Telegram Messenger Inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1","date":"2026-04-19T06:45:56.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telesco.pe","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Tue, 11 Nov 2025 15:14:08 GMT","end":"Sun, 13 Dec 2026 15:14:08 GMT"},"fingerprint":{"sha1":"C8:B7:EE:0C:41:13:71:AA:B4:69:B4:2B:EE:EF:79:F2:1D:49:37:9A","sha256":"2E:8C:0C:6F:B4:A0:E5:EB:6D:C5:3E:78:51:7B:E3:75:51:D5:DC:6F:95:AC:5C:68:4F:BA:09:91:35:E0:3D:2F"}}},"request":{"raw":"GET /file/Xt9khmICkGw6e_SBLhaWgr4Kcv0XYH6xM0e5I75N-YHCid3OVtJgkSZLvNMe3vSfz1svaj55AcW_1TQVg7bBny-aiSRXRIUewUo3YJy6fWjxYAZSAQYiBFZtZsLmMU0UTzlobxs55MwNPSMbYdU0JfcitzEyztDS9sQwVXhgUm3TBVjGbcroB91LH04QvL1fj4omd9VugUg7qRtIa741FqLrynXSGD7WSMQjqiNZipTwrTQpTbWvHTR87M5MQWFoOd0NZIn7wsWWCO5pc8tEoju2GA4eEu9wP3l-msFhndopASOVA0NMsOFe315ajSWOgURGjme--RMcpfM6rGPEXw.jpg HTTP/1.1\r\nHost: cdn5.telesco.pe\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5378\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'none'; sandbox\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccess-control-expose-headers: Accept-Ranges, Content-Range, Content-Length\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Sun, 19 Apr 2026 09:45:57 GMT\r\netag: \"527df2f7e6353cdbdb9d9dea6a6d637155f222be\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5378,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 160x160, components 3","md5":"c62695dbfe63c079e2336bb64c03d4d6","sha1":"68ceaa35ef3b2f78405f3c45d2124625acfcd29f","sha256":"c1b23e0c2e89b84aea1deba9364dea3afebbc89bcd9c9b5227b11e5b997f7649","sha512":"ffd2b36dd7a45267b2d4a6e2883a45cc19509529244621671e7edfe8dc01cfdb0111b5a2932ba94ba56ac9af1f052aabc35727f58d03ca041c0586e2517afa36","ssdeep":"96:b6BqpusZ3WtpnsrP+D7JMWKxycHQRbXuvJKleWcw6uIsRIpDHvC0FPWAGoji323:mBqpWbsSfJXKUcHQNXXFcwtIMIprblkQ","tlshash":"63b17de77b9b9e6fd04009b9cc050b1dbbad79224fb932eeb44062498bae5600f04d4d","first_seen":"2026-04-19T06:46:23.861649Z","last_seen":"2026-04-19T06:46:23.861649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1259,"timings":{"blocked":439,"dns":13,"connect":175,"send":0,"wait":371,"receive":0,"ssl":256},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn5.telesco.pe/file/E0tUae8jQMnWZqwDj3DkT0gHIbFPjrejM384dr1JiqsHrmJRgjDTSt-BibDQpLw0bkscmJ8ClPGuNCx7ho3gSBEWnHAJawu_W3DxwRKHVXEEXCbTpOnr2w59A9tGe4ZLdwdxOpo3W-M6k3B8UDZAm9tolvVyTWbduxvQ67dsuMW47jBncKldOpP0EABBDYn8YvhppL_FLPFfIu8Peg_RKAh2UrsvCUwpw3Bpv8HV5FDaNN58MFLVio3wit3OCGwCpqpXvlNQe1EsBEmOeuiSAIlblnNfF7LEWaKi3iTtkUNpang1fgbr1f5zA-cZATlDix6i-woPqZc-YWP5NrEFUw.jpg","fqdn":"cdn5.telesco.pe","domain":"telesco.pe","tld":"pe"},"ip":{"addr":"149.154.171.237","port":443,"asn":62014,"as":"Telegram Messenger Inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1","date":"2026-04-19T06:45:56.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telesco.pe","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Tue, 11 Nov 2025 15:14:08 GMT","end":"Sun, 13 Dec 2026 15:14:08 GMT"},"fingerprint":{"sha1":"C8:B7:EE:0C:41:13:71:AA:B4:69:B4:2B:EE:EF:79:F2:1D:49:37:9A","sha256":"2E:8C:0C:6F:B4:A0:E5:EB:6D:C5:3E:78:51:7B:E3:75:51:D5:DC:6F:95:AC:5C:68:4F:BA:09:91:35:E0:3D:2F"}}},"request":{"raw":"GET /file/E0tUae8jQMnWZqwDj3DkT0gHIbFPjrejM384dr1JiqsHrmJRgjDTSt-BibDQpLw0bkscmJ8ClPGuNCx7ho3gSBEWnHAJawu_W3DxwRKHVXEEXCbTpOnr2w59A9tGe4ZLdwdxOpo3W-M6k3B8UDZAm9tolvVyTWbduxvQ67dsuMW47jBncKldOpP0EABBDYn8YvhppL_FLPFfIu8Peg_RKAh2UrsvCUwpw3Bpv8HV5FDaNN58MFLVio3wit3OCGwCpqpXvlNQe1EsBEmOeuiSAIlblnNfF7LEWaKi3iTtkUNpang1fgbr1f5zA-cZATlDix6i-woPqZc-YWP5NrEFUw.jpg HTTP/1.1\r\nHost: cdn5.telesco.pe\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6238\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'none'; sandbox\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccess-control-expose-headers: Accept-Ranges, Content-Range, Content-Length\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Sun, 19 Apr 2026 09:45:57 GMT\r\netag: \"1a3bcc3e958b46c0440aac38870836915af71228\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6238,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 160x160, components 3","md5":"3a9f96176c7e54ad98b236eff1fc6170","sha1":"da63897faaefce400f8eb0f4932c73ab30b74824","sha256":"08be3fb09531211a1b94f44f4658ff316a1c94b3eaab0cb41da62962a7a2771b","sha512":"469a4392644c0c6e3272ada04b36c70a4a20d991e5587982254e09eeb9e5b5903767d613fd7012061dba5ce192fb9c20adb892e632024b8dd3a63e0519d9403f","ssdeep":"96:ZElbw+iDhMt5b3iIEnFKVxFavjq3AXAjD+64YrPYcWciRiaBNIByeAtWokwSiMab:0wJMt5M87G6rPYchinBNIBSWvwQab","tlshash":"5fd17e11abbc8976e706a3f1cf402f31771cbd172db23a9cfad465344185d9696080cc","first_seen":"2026-04-19T06:46:23.862715Z","last_seen":"2026-04-19T06:46:23.862715Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1372,"timings":{"blocked":442,"dns":14,"connect":175,"send":0,"wait":474,"receive":0,"ssl":258},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1","date":"2026-04-19T06:45:56.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://t.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11028\r\nlast-modified: Thu, 20 Oct 2022 11:05:33 GMT\r\netag: \"63512b7d-2b14\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11028,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 11028, version 1.0","md5":"1f6d3cf6d38f25d83d95f5a800b8cac3","sha1":"279f300ca2cbbdf9f5036ef2f438607fbf377daa","sha256":"796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f","sha512":"716305f4d2582683b64c61b5e2390983579ea0fb33c936dd3ea8362872176625fbcb6f5ad18d2abf85da82d14c33a9640dfc5749922cb2fc079ddf37864f361f","ssdeep":"192:4oijUxKA0B3BxJPeLrh00JWNhi5A5HWdZ6SfroKthzwbMcYfQKvwpFVX2T+:Nx4bexHAE6STltlwbMcovaET+","tlshash":"9032cf5eaa417172974b5791e296fbc0e627186438fb02fef85185bbc4045e437092be","first_seen":"2023-04-05T08:50:36Z","last_seen":"2026-04-21T06:07:04.036986Z","times_seen":73621,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.me/SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1","date":"2026-04-19T06:45:56.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.t.me","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Tue, 21 Oct 2025 19:17:28 GMT","end":"Sun, 22 Nov 2026 19:17:28 GMT"},"fingerprint":{"sha1":"C2:28:12:7F:8C:B2:D6:C7:3A:96:F0:44:37:DF:F9:9A:E8:C6:84:BC","sha256":"02:29:2C:40:8E:4B:65:6A:8B:6D:DD:92:BC:E3:97:F3:76:D9:86:33:FD:33:51:BF:5D:88:9D:31:57:AE:EE:0C"}}},"request":{"raw":"POST /SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1 HTTP/1.1\r\nHost: t.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 5\r\nOrigin: https://t.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1\r\nCookie: stel_ssid=fb80c78ae3d038ddfc_16314173489007964691; stel_on=1; stel_dt=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":5,"data":"_rl=1"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 24\r\npragma: no-cache\r\ncache-control: no-store\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=35768000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-04-21T07:20:28.94582Z","times_seen":368922,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tgxlink.eu.org/","date":"2026-04-19T06:45:56.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://tgxlink.eu.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 01:42:13 GMT\r\nexpires: Fri, 16 Apr 2027 01:42:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 277423\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-21T07:32:01.837001Z","times_seen":149611,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":77,"dns":1,"connect":15,"send":0,"wait":17,"receive":22,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tgxlink.eu.org/","date":"2026-04-19T06:45:56.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://tgxlink.eu.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Apr 2026 01:42:13 GMT\r\nexpires: Fri, 16 Apr 2027 01:42:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 277423\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-21T07:32:01.837001Z","times_seen":149611,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":52,"dns":1,"connect":16,"send":0,"wait":16,"receive":10,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.me/SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://tgxlink.eu.org/","date":"2026-04-19T06:45:56.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.t.me","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Tue, 21 Oct 2025 19:17:28 GMT","end":"Sun, 22 Nov 2026 19:17:28 GMT"},"fingerprint":{"sha1":"C2:28:12:7F:8C:B2:D6:C7:3A:96:F0:44:37:DF:F9:9A:E8:C6:84:BC","sha256":"02:29:2C:40:8E:4B:65:6A:8B:6D:DD:92:BC:E3:97:F3:76:D9:86:33:FD:33:51:BF:5D:88:9D:31:57:AE:EE:0C"}}},"request":{"raw":"GET /SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1 HTTP/1.1\r\nHost: t.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tgxlink.eu.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 4064\r\nset-cookie: stel_ssid=fb80c78ae3d038ddfc_16314173489007964691; expires=Mon, 20 Apr 2026 06:45:56 GMT; path=/; samesite=None; secure; HttpOnly\nstel_on=1; expires=Sun, 11 Apr 2027 14:22:22 GMT; path=/; samesite=None; secure; HttpOnly\r\npragma: no-cache\r\ncache-control: no-store\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=35768000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15387,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (547)","md5":"7337af3fccc704b424c54ed250bda778","sha1":"66dca40d7bbf840dd0f1ea3f9be3eba93082d29a","sha256":"0aeec62a1ac72b780ff489be417f3ad2e20779fef6f21415d8d6c0de8a70065d","sha512":"902a2c6d48537d32cfe40132ce31aaca827751ae50d827d3dff074d8f64bc9d82c1a082e3a71106f0d1e1922e1ad8aa3328ed6c0c64726ea9d849b9cbf467a97","ssdeep":"192:LukACv/5ueAfQNs69gn53/Sx00x0OXyoWx0o+OYfsOYNa/2E2FOLJtC:LTn5uM79AqxJx1XyoWxUAJa/ZFJU","tlshash":"e5624233c673881a615386eeb091b61a9da4c3dfe5536c423adc7274ab81dc09e2774f","first_seen":"2026-04-19T06:46:23.864144Z","last_seen":"2026-04-19T06:46:23.864144Z","times_seen":1,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":118,"dns":1,"connect":21,"send":0,"wait":78,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn5.telesco.pe/file/aw7_34koo4NdrP4uBAaZ8ed9s_eQ7A_13IvH23QPyayXBUCeaARfFxEnx7GHPD9Q0j_tKSxTdIpj9rZ_tPrQKexDZJG5QB5aVWGEH-Fs_tqnCVp40WJrakjkBBPv8Zl7LKoSUzARBH4M0qYiwEBDxNTA1qaawhUBud36pvIvmVvrg3w2FbxPC1c9hOUpWNvyuB-wqsIyTSm2p_e_kT8RPUHWeCyAT-IQ9VNn7YRuIZNkUK5vZQVafIBUyj4Bt-rYAiop2u4Rl85kt6X1rdu-HcQtejdkNqhny7RmUzgmMGWvoZWUuTNaO7BmatYCB8PeCZKKV2j5xriw40P549qOzg.jpg","fqdn":"cdn5.telesco.pe","domain":"telesco.pe","tld":"pe"},"ip":{"addr":"149.154.171.237","port":443,"asn":62014,"as":"Telegram Messenger Inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1","date":"2026-04-19T06:45:56.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telesco.pe","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Tue, 11 Nov 2025 15:14:08 GMT","end":"Sun, 13 Dec 2026 15:14:08 GMT"},"fingerprint":{"sha1":"C8:B7:EE:0C:41:13:71:AA:B4:69:B4:2B:EE:EF:79:F2:1D:49:37:9A","sha256":"2E:8C:0C:6F:B4:A0:E5:EB:6D:C5:3E:78:51:7B:E3:75:51:D5:DC:6F:95:AC:5C:68:4F:BA:09:91:35:E0:3D:2F"}}},"request":{"raw":"GET /file/aw7_34koo4NdrP4uBAaZ8ed9s_eQ7A_13IvH23QPyayXBUCeaARfFxEnx7GHPD9Q0j_tKSxTdIpj9rZ_tPrQKexDZJG5QB5aVWGEH-Fs_tqnCVp40WJrakjkBBPv8Zl7LKoSUzARBH4M0qYiwEBDxNTA1qaawhUBud36pvIvmVvrg3w2FbxPC1c9hOUpWNvyuB-wqsIyTSm2p_e_kT8RPUHWeCyAT-IQ9VNn7YRuIZNkUK5vZQVafIBUyj4Bt-rYAiop2u4Rl85kt6X1rdu-HcQtejdkNqhny7RmUzgmMGWvoZWUuTNaO7BmatYCB8PeCZKKV2j5xriw40P549qOzg.jpg HTTP/1.1\r\nHost: cdn5.telesco.pe\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9270\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'none'; sandbox\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccess-control-expose-headers: Accept-Ranges, Content-Range, Content-Length\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Sun, 19 Apr 2026 09:45:57 GMT\r\netag: \"094fc5a14b3503d6aee9bac2dc836f9660d98208\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccept-ranges: bytes, bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9270,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 160x160, components 3","md5":"4aed3051f7d7c8c2b265c0a9fb47ead8","sha1":"085fd2dff2549efef4c66874ee6c6c1ac653f9b1","sha256":"d0fabee19530a053dab181096e59a45e446b2b11d21da31eefbef57e41ad3bf4","sha512":"a0e20ca50bc52e79adfd08848d53fd57d5f33de36631b0744b92b2548f55a21385841a6dd5d70ffb57b4b264c260f5696f1d22cc265a708196dff45c8e7d910b","ssdeep":"192:24xLTmQ4kq79X2EhZTr1OEQfAOILxJU6LaHvGoZeLvvLvU7B:2zQ4kc9X0WOILrXaHO6eLvzv0B","tlshash":"7c12ae35c72d4994eedb42f2dcf8f651930e3a887c764335b0ee4086ea7b09f06a8541","first_seen":"2026-04-19T06:46:23.865103Z","last_seen":"2026-04-19T06:46:23.865103Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1027,"timings":{"blocked":409,"dns":10,"connect":170,"send":0,"wait":206,"receive":1,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/widget-frame.js?66","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026dark=1","date":"2026-04-19T06:45:56.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/widget-frame.js?66 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 12:46:06 GMT\r\netag: W/\"68b04f8e-17b4e\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97102,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3713)","md5":"c4825aabfb1129de5a11f9f2377834d9","sha1":"39d76a8d35fa411e0389e1d3a0d4e9000babfc89","sha256":"53df8dbdcd2cc75a317fdbc07e08e2e75e7e25a052fa2ed03871125f67b50001","sha512":"8c4f764301c1d735c6ea364d9cbbb8a399231f83e857b4322ddb615cda594f82aab5c2ff0528938e4ef97243b1c745bc85e94522a9f5993ccb522808ecce1dff","ssdeep":"768:a3+62J1xNNt3p1SG6CwPHG+AIieDPxsyk7Te9vwCiPZZpMEZF5ibQafIw8JBgHAe:+j2jNt3Qsyk7L1ZF8sv7e6M","tlshash":"3f933f4d69f33166a477b17a9baf55093635d003110ece217d0ca394af84934abfbbe8","first_seen":"2025-08-28T14:01:30.149557Z","last_seen":"2026-04-21T06:07:03.923864Z","times_seen":749,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/emoji/40/E29DA4.png","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026dark=1","date":"2026-04-19T06:45:56.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/emoji/40/E29DA4.png HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2452\r\nlast-modified: Fri, 01 Nov 2019 00:04:50 GMT\r\netag: \"5dbb76a2-994\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"ad7a70861682a913a21fb719251ea4c5","sha1":"221135d8eb3c6f94e1f890146a13c1ec80b70eb4","sha256":"58e33e04ed187bdf5c1fae0fe8ed8d3ec9b5ebb79e60519beb77a0349b2e09f5","sha512":"f6679ac0996ac88c046e3d46faef13c8c636b51330d992d8c351b386b855ed1a02bfc6fbfecf12e34bcdf038061dc689767566439572e7cafd2436c973e00da9","ssdeep":"","tlshash":"b6514a9fd51b3a06a9f909a2d201d39b9762862b6f351323b00d0cf5a4e620f185b7a1","first_seen":"2023-05-12T19:53:06Z","last_seen":"2026-04-21T06:07:03.935875Z","times_seen":333,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/emoji/40/F09F94A5.png","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026dark=1","date":"2026-04-19T06:45:56.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/emoji/40/F09F94A5.png HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2581\r\nlast-modified: Fri, 01 Nov 2019 00:04:50 GMT\r\netag: \"5dbb76a2-a15\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2581,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"77d1231b7757d5152d247457e3c14952","sha1":"d94776b0a2173b6e23003d1d093aa15fc802de96","sha256":"90b4abfa7281f9465c5d65947c7a035d414ec1add2729ad1a2a5dc2bb7bf9878","sha512":"73843aa945b6b6caf17d1328b1ab9c81687140444aec60ecc34d3b88ee4036eddb1d123e83bd8e0ee9b8cfe76b7c374eca35e04a5a783f5c26ffd1d0dbcc46a4","ssdeep":"","tlshash":"8f515d87b173a39efc325d5c9991d93cc5134101b172a8b0b9c55aa88f5bdef6e40cc1","first_seen":"2023-05-09T23:24:52Z","last_seen":"2026-04-21T06:07:04.018545Z","times_seen":333,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/emoji/40/F09F918E.png","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026dark=1","date":"2026-04-19T06:45:56.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/emoji/40/F09F918E.png HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2235\r\nlast-modified: Fri, 01 Nov 2019 00:04:50 GMT\r\netag: \"5dbb76a2-8bb\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2235,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"4d62b2872ac5a096ced8480fcfc09865","sha1":"7b2fdf6d226d27f82ca0b961f1559f39fab1817f","sha256":"ebc861b8a77db473afe8b21807b42044da41bc03900e19414e6562cfcccdbc90","sha512":"8ab7000c73f679f3a7183fabb64972bcd63dcd09a18bd4a7a8ebd5b02af77661ccf02f9f09dd1696af3a73e35a6b90bae03942584e38aa010cdd05bb8b6e1120","ssdeep":"","tlshash":"9a412b59cb3c8d16e190a276853d9e0ae870f4dc82284926375dfd7600a828b065e45f","first_seen":"2023-05-26T10:30:23Z","last_seen":"2026-04-19T06:46:23.867107Z","times_seen":73,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/emoji/40/F09F998F.png","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026dark=1","date":"2026-04-19T06:45:56.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /img/emoji/40/F09F998F.png HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 2148\r\nlast-modified: Fri, 01 Nov 2019 00:04:50 GMT\r\netag: \"5dbb76a2-864\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2148,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"9881c7866b4d7612b7e2276363c18f48","sha1":"de5b60c5586e1e26828f2afcea41dd0e8240bcc6","sha256":"2eee814cf1ce6d4f84ed9e5b4a34b61f13e58bfdeb0d2b4a40263416bfb1cac3","sha512":"883653a17d8391d3c9d0bb50778768c66b8ad247047f9a19edee3aa4875fe5b2eecd88030448073a752fb3e26237ae2131d88138563a02afe672f2d93dff6c87","ssdeep":"","tlshash":"7b4129ccb700c9f29d3d75249fafdc4c8651c6c9c59221a730930bfb6244c2e053a02c","first_seen":"2025-07-11T08:36:05.093326Z","last_seen":"2026-04-19T06:46:23.867579Z","times_seen":59,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://t.me/SpringsFern/143?embed=1\u0026discussion=1\u0026comments_limit=5\u0026colorful=1\u0026dark=1","date":"2026-04-19T06:45:56.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://t.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11072\r\nlast-modified: Thu, 20 Oct 2022 11:05:33 GMT\r\netag: \"63512b7d-2b40\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11072,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 11072, version 1.0","md5":"e7df3d0942815909add8f9d0c40d00d9","sha1":"cf5032eea3399a58870e8a05e629b006a8c7c3c7","sha256":"bce2f309470952b7affa62ff4d91b454334c68cefa541429b502904d20696875","sha512":"3632a44ee28aec0cf67ef7d3780a18db1aa84837817a3ea69a5f892d656a94b9faefc0314e2c38599410802f875df73581558ee9511ced7f717feda29336cfa0","ssdeep":"192:X+O5i60QYQyX4xOc50jR0ujO1W4qEaeFw1CsfCIRsiFDK5mvuGDP3dJGkWNZuQST:uLyYQ5Oc50+91W45FwRBseDT3fGklt1","tlshash":"6432be0ed131bba7c9fe1c3bae1307b072641e7a11badd6ab200eed5945f5a21c01db5","first_seen":"2023-04-06T07:37:44Z","last_seen":"2026-04-21T08:13:19.53593Z","times_seen":10343,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-widget.js?22","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tgxlink.eu.org/","date":"2026-04-19T06:45:56.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-widget.js?22 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tgxlink.eu.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Apr 2023 11:46:12 GMT\r\netag: W/\"642abc84-4ff5\"\r\nexpires: Thu, 23 Apr 2026 06:45:56 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20469,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (423)","md5":"1ff8b98c72268de58837846f2056c65a","sha1":"e77fcc14f1efd17d319c9f82627e5789333b9dbe","sha256":"0f6cdd09b3bbebf50c4e1679aff6f021f5e183a4ba2dea3a0801394599ff6afd","sha512":"1a680a7e87f16520da934f4034cdc601ebef9c306c7f5e3ea165588f044142cadcf5eb06cefedc8ea7768ff63830586a2776351c7b9429f1e33b639adca5f1ed","ssdeep":"384:+vLsc8o/o9o7IFdWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SU0CF3gLcHPb","tlshash":"2492819e1af72224a567713a4b5fa1093232e163700ddc503e6c5b90bf90a6767b0fdd","first_seen":"2023-04-05T01:44:44Z","last_seen":"2026-04-21T06:07:04.012257Z","times_seen":2538,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":144,"dns":20,"connect":21,"send":0,"wait":20,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tgxlink.eu.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"tgxlink.eu.org","domain":"tgxlink.eu.org","tld":"eu.org"},"ip":{"addr":"104.21.33.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tgxlink.eu.org/","date":"2026-04-19T06:45:56.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tgxlink.eu.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 14:00:40 GMT","end":"Sat, 06 Jun 2026 15:00:25 GMT"},"fingerprint":{"sha1":"81:AE:68:1E:AF:6F:52:68:73:5D:0B:AA:AB:E2:D2:27:ED:D8:11:CE","sha256":"33:54:CD:8C:1F:F1:71:8F:F5:6F:C8:ED:9D:7E:4A:45:96:48:0B:E9:6B:F6:A8:9E:E4:1F:17:4E:A7:3B:D2:D2"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: tgxlink.eu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tgxlink.eu.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sun, 19 Apr 2026 07:33:56 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cUZdD7RYgLiAY6IgHYT6MIqWO54jrpAtZkgW02Yvnr9%2FaIXvkPVWt4d86LyDBiFj1rpwYjpdlPK382IzT0bmZksgVlsvEcgD3SZdbQ7MC%2FHbPqFVpGyaIZjATo%2BUP8WfLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sun, 19 Apr 2026 06:45:56 GMT\r\ncf-ray: 9ee9f3020ba50731-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-21T07:33:48.855214Z","times_seen":309263,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}