200 OK 5.3 kB URL User Request GET HTTP/2 IP
ASN #62041 Telegram Messenger Inc
Certificate IssuerGoDaddy.com, Inc.
Subject*.t.me
FingerprintD7:CC:2A:92:7B:DC:AE:6A:D7:92:51:20:49:AD:3B:AC:F9:27:F8:16
ValidityFri, 06 Oct 2023 19:50:31 GMT - Wed, 06 Nov 2024 19:50:31 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3560)
Hash d683fddbc5854dbe2f0f7885082b308b
1868d1bca6e086132b2618796c8ee8b9beb33bbf
809a00f9c9e104c82967a2278890acfad58e67536a869e39e4937ecdb0a8fe35
GET /L1ptoncasino/2 HTTP/1.1
Host: t.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:54 GMT
content-type: text/html; charset=utf-8
content-length: 5298
set-cookie: stel_ssid=fac18835dfb8f22d8e_3105455367940525189; expires=Wed, 29 Nov 2023 16:31:54 GMT; path=/; samesite=None; secure; HttpOnly
pragma: no-cache
cache-control: no-store
x-frame-options: ALLOW-FROM https://web.telegram.org
content-security-policy: frame-ancestors https://web.telegram.org
content-encoding: gzip
strict-transport-security: max-age=35768000
X-Firefox-Spdy: h2
telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
200 OK 11 kB URL GET HTTP/2 telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type Web Open Font Format (Version 2), TrueType, length 11028, version 1.0\012- data
Hash 1f6d3cf6d38f25d83d95f5a800b8cac3
279f300ca2cbbdf9f5036ef2f438607fbf377daa
796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f
GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://t.me
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: application/octet-stream
content-length: 11028
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: "63512b7d-2b14"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2
200 OK 11 kB URL GET HTTP/2 telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type Web Open Font Format (Version 2), TrueType, length 11040, version 1.0\012- data
Hash 5e22a46c04d947a36ea0cad07afcc9e1
6091d981c2a4ee975c7f6b56186ee698040bb804
0f53e8b0a717ca4ce313eec62b90d41db62c2f4946259a65c93bf8e84c5b0c44
GET /fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://t.me
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: application/octet-stream
content-length: 11040
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: "63512b7d-2b20"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
t.me/L1ptoncasino/2?embed=1&mode=tme
200 OK 4.3 kB URL GET HTTP/2 t.me/L1ptoncasino/2?embed=1&mode=tme
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2
Certificate IssuerGoDaddy.com, Inc.
Subject*.t.me
FingerprintD7:CC:2A:92:7B:DC:AE:6A:D7:92:51:20:49:AD:3B:AC:F9:27:F8:16
ValidityFri, 06 Oct 2023 19:50:31 GMT - Wed, 06 Nov 2024 19:50:31 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1918)
Hash 0b44ef36dc7fd62ac7f98033b85fcb0d
48d6afd00c520e9453c115fc4754dc5a515b63ce
039488f91b58ceb208d38cd86269fc13cc8557a6d3fd674bd1c1173a9074cdae
GET /L1ptoncasino/2?embed=1&mode=tme HTTP/1.1
Host: t.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/L1ptoncasino/2
Cookie: stel_ssid=fac18835dfb8f22d8e_3105455367940525189
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: text/html; charset=utf-8
content-length: 4315
set-cookie: stel_on=1; expires=Thu, 28 Nov 2024 16:33:42 GMT; path=/; samesite=None; secure; HttpOnly
pragma: no-cache
cache-control: no-store
content-encoding: gzip
strict-transport-security: max-age=35768000
X-Firefox-Spdy: h2
telegram.org/img/apple-touch-icon.png
200 OK 5.6 kB URL GET HTTP/2 telegram.org/img/apple-touch-icon.png
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced\012- data
Hash 295ccdb03006b8dfef45090dafbd46ac
491ab660270e47cbac6a5731c51cca71c1c1b2b1
a51d667d4262047c23e3a2a8aac3b46dc8a58c686cc013f2354011c07bf22cf3
GET /img/apple-touch-icon.png HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: image/png
content-length: 5644
last-modified: Thu, 21 Apr 2022 13:47:47 GMT
etag: "62616083-160c"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
telegram.org/img/emoji/40/F09F9A80.png
200 OK 3.0 kB URL GET HTTP/2 telegram.org/img/emoji/40/F09F9A80.png
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2?embed=1&mode=tme
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 7de3e931c938142818815de65c5ff7b0
b50fd49d456e757f47590fae3b26c6a728c3a648
b09cb1f183ad143a1e9645642498f058b7cc36c7a74c331edf80230cf6b314fa
GET /img/emoji/40/F09F9A80.png HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: image/png
content-length: 2997
last-modified: Fri, 01 Nov 2019 00:04:50 GMT
etag: "5dbb76a2-bb5"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
telegram.org/img/emoji/40/F09F92B0.png
200 OK 2.7 kB URL GET HTTP/2 telegram.org/img/emoji/40/F09F92B0.png
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2?embed=1&mode=tme
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 9c2cab881758931a5acf295f33dfb871
6e8de63f761d4824164543b00bd20236be34cc86
5ff2b27e2e05d08bcf76b75af105ae51c9eae81df1b3ca8fb80451b475ef9994
GET /img/emoji/40/F09F92B0.png HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: image/png
content-length: 2731
last-modified: Fri, 01 Nov 2019 00:04:50 GMT
etag: "5dbb76a2-aab"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
telegram.org/img/emoji/40/F09F8E81.png
200 OK 3.3 kB URL GET HTTP/2 telegram.org/img/emoji/40/F09F8E81.png
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2?embed=1&mode=tme
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 86ecca679356a2cfd5ac71c07b72b049
c697292d33f7f3aabdc3d0f1713e21a77fe46ae5
8da9efea9335e112246c50d9cf815ca2e7c2392d8f7d1ee3eb13d74cb1b900b3
GET /img/emoji/40/F09F8E81.png HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: image/png
content-length: 3258
last-modified: Fri, 01 Nov 2019 00:04:50 GMT
etag: "5dbb76a2-cba"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
telegram.org/css/font-roboto.css?1
200 OK 3.2 kB URL GET HTTP/2 telegram.org/css/font-roboto.css?1
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 066ed1b4d00d93f8b4a2f0f23a2205d4
cf53cb401b2110b7caef9442b81249c50284437d
b6ffcc429bc9c018cc4271ee5d2c0211091e18d43208d00eaa3371a2b0941a0e
GET /css/font-roboto.css?1 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: text/css
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: W/"63512b7d-1816"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/img/emoji/40/F09F8E89.png
200 OK 3.9 kB URL GET HTTP/2 telegram.org/img/emoji/40/F09F8E89.png
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2?embed=1&mode=tme
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 2d723f73531704454d45d5e6c73e4071
973087c416f9da392bfe9cd4356d0ade048a1e91
48898dc208b2f39f137415688c89304b7a967178b374f0b7b8225108d2cfcfed
GET /img/emoji/40/F09F8E89.png HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: image/png
content-length: 3936
last-modified: Fri, 01 Nov 2019 00:04:50 GMT
etag: "5dbb76a2-f60"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
telegram.org/img/emoji/40/F09F94A5.png
200 OK 2.6 kB URL GET HTTP/2 telegram.org/img/emoji/40/F09F94A5.png
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2?embed=1&mode=tme
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 77d1231b7757d5152d247457e3c14952
d94776b0a2173b6e23003d1d093aa15fc802de96
90b4abfa7281f9465c5d65947c7a035d414ec1add2729ad1a2a5dc2bb7bf9878
GET /img/emoji/40/F09F94A5.png HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: image/png
content-length: 2581
last-modified: Fri, 01 Nov 2019 00:04:50 GMT
etag: "5dbb76a2-a15"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
telegram.org/css/bootstrap.min.css?3
200 OK 14 kB URL GET HTTP/2 telegram.org/css/bootstrap.min.css?3
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 1ab5396f4005f1cdf3980f4bfba4bb4b
b8cf35da0d5c7ab2ea4427779a16f52c0a578616
a13ed218bbe366b652dd776e3c76e7eda49d9e83828ceb886ae03028f3a6d2bc
GET /css/bootstrap.min.css?3 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: text/css
last-modified: Fri, 10 Nov 2017 17:54:14 GMT
etag: W/"5a05e7c6-a61b"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/img/emoji/40/E29CA8.png
200 OK 1.6 kB URL GET HTTP/2 telegram.org/img/emoji/40/E29CA8.png
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2?embed=1&mode=tme
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 7206c1aa74f4c7bf72ddb027bbc6a279
12eb33dfda7f8fa20824d32fe88178da3cf7ced7
1a75341dc3bfd290fb1a2c77a29d24f5c1689eb99bf016e5bdfaf4e8366e8d0c
GET /img/emoji/40/E29CA8.png HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: image/png
content-length: 1634
last-modified: Fri, 01 Nov 2019 00:04:50 GMT
etag: "5dbb76a2-662"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
telegram.org/css/telegram.css?236
200 OK 40 kB URL GET HTTP/2 telegram.org/css/telegram.css?236
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 0d5e983ccdca26fee186fc8119c90bba
f1bc76b534fe5d39d61d543a494cea113cd8f463
dc18165df45dc647982a8903e3ecf13a40b57f81c32301933816ad5e8ede974a
GET /css/telegram.css?236 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: text/css
last-modified: Mon, 20 Mar 2023 10:58:55 GMT
etag: W/"64183c6f-1c0b3"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/js/tgwallpaper.min.js?3
200 OK 12 kB URL GET HTTP/2 telegram.org/js/tgwallpaper.min.js?3
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 08434ff96a0225b52b7f1534cc8cc3ad
4089edfe5f720053c98a17ec10b79d05282d896b
811dcd9799fda81387041385077d498a9cfef3aa9a164cf47fa4727bb2f6a778
GET /js/tgwallpaper.min.js?3 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: application/javascript
last-modified: Thu, 03 Mar 2022 19:57:25 GMT
etag: W/"62211da5-ba3"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
cdn4.cdn-telegram.org/file/qBt-WT0zxoIbWxPaC7wqUgloCIkRQoBkZjCJmAtdbnJy9PPnopS3nZFrm7wGEdx5TwWqn1G6KH3_d0iKMTrEC5jqVFxXmiJB6cZHNL30vlmsm3jQWQgeXjz4TxThE_xHTSVB_aViCkNLcC4fnze8J19UmsJEukyjiDydsLQObJNPgIYmRRHWbQ2ELoTBVsKDjG32GAHJSrjE8MZZBtOfa1BUi3yrohIm7wV0x9IoJIjkcEwcS57J3kas__ySJpStebWrhpVWEOEMxjeeGLb649FBBQ3kXXZMhApEyhCiqHO0W4GOIx8KCsG0G2A0D0wKls1sPcfxCAB2NC22GSxTGQ.jpg
200 OK 15 kB URL GET HTTP/2 cdn4.cdn-telegram.org/file/qBt-WT0zxoIbWxPaC7wqUgloCIkRQoBkZjCJmAtdbnJy9PPnopS3nZFrm7wGEdx5TwWqn1G6KH3_d0iKMTrEC5jqVFxXmiJB6cZHNL30vlmsm3jQWQgeXjz4TxThE_xHTSVB_aViCkNLcC4fnze8J19UmsJEukyjiDydsLQObJNPgIYmRRHWbQ2ELoTBVsKDjG32GAHJSrjE8MZZBtOfa1BUi3yrohIm7wV0x9IoJIjkcEwcS57J3kas__ySJpStebWrhpVWEOEMxjeeGLb649FBBQ3kXXZMhApEyhCiqHO0W4GOIx8KCsG0G2A0D0wKls1sPcfxCAB2NC22GSxTGQ.jpg
IP
Requested by https://t.me/L1ptoncasino/2?embed=1&mode=tme
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 160x160, components 3\012- data
Hash 05dd747ac9de391c6337490e5b7c9cef
835bd1ba7675b705351233c03ea3fccdaa7873ab
d45f88f388c0c04c2cc9c90f29db37d031732b6543b3aa75d3ef9d1162a34469
GET /file/qBt-WT0zxoIbWxPaC7wqUgloCIkRQoBkZjCJmAtdbnJy9PPnopS3nZFrm7wGEdx5TwWqn1G6KH3_d0iKMTrEC5jqVFxXmiJB6cZHNL30vlmsm3jQWQgeXjz4TxThE_xHTSVB_aViCkNLcC4fnze8J19UmsJEukyjiDydsLQObJNPgIYmRRHWbQ2ELoTBVsKDjG32GAHJSrjE8MZZBtOfa1BUi3yrohIm7wV0x9IoJIjkcEwcS57J3kas__ySJpStebWrhpVWEOEMxjeeGLb649FBBQ3kXXZMhApEyhCiqHO0W4GOIx8KCsG0G2A0D0wKls1sPcfxCAB2NC22GSxTGQ.jpg HTTP/1.1
Host: cdn4.cdn-telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: image/jpeg
content-length: 15073
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "e3f466c656f46fbbd441740aff5a66794467b9d4"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn4.cdn-telegram.org/file/fc50275c3a.mp4?token=CUrUcMc0k6aW37ZdmI14AhSz-7prrv-VE4E8iuy3QpDgqBW6NPspIiRIsfHIxOpmvmYO0fatQLpIizxaPHhcE9Iee754xSQAXe-ANS8YDEfJyQzxRZC0ZX9nWLaW8ZItogZl7OUc1Dd9HgsAszNv-AX-fEuOYEO4vJiFrp-wQiW_79T3z3xVUjDsQ4nqM0cbKymMzAZ-cQ465lk12d1lwIaHlSoKVXt9Gub99CRs-dK3P_OyQpHVBNtNxNICtzxsaifXEbjlG8hBn45coTxnNtnqallW0DaKonh61qfzJvX6KA0UkQpXVzI9EdV-wNWcul8tNFeCFBCvvjrLNs_vVQ
206 Partial Content 47 kB URL GET HTTP/2 cdn4.cdn-telegram.org/file/fc50275c3a.mp4?token=CUrUcMc0k6aW37ZdmI14AhSz-7prrv-VE4E8iuy3QpDgqBW6NPspIiRIsfHIxOpmvmYO0fatQLpIizxaPHhcE9Iee754xSQAXe-ANS8YDEfJyQzxRZC0ZX9nWLaW8ZItogZl7OUc1Dd9HgsAszNv-AX-fEuOYEO4vJiFrp-wQiW_79T3z3xVUjDsQ4nqM0cbKymMzAZ-cQ465lk12d1lwIaHlSoKVXt9Gub99CRs-dK3P_OyQpHVBNtNxNICtzxsaifXEbjlG8hBn45coTxnNtnqallW0DaKonh61qfzJvX6KA0UkQpXVzI9EdV-wNWcul8tNFeCFBCvvjrLNs_vVQ
IP
Requested by https://t.me/L1ptoncasino/2?embed=1&mode=tme
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash c6a1e2f47c5026c5af5c6c46dd5fec75
8003c9b1312cd07d42b25caea42543fe92477ca6
1640fd0e48b7fb8877e9ed72e528fc88a769cdba15d32dfcaea91a87305ce9be
GET /file/fc50275c3a.mp4?token=CUrUcMc0k6aW37ZdmI14AhSz-7prrv-VE4E8iuy3QpDgqBW6NPspIiRIsfHIxOpmvmYO0fatQLpIizxaPHhcE9Iee754xSQAXe-ANS8YDEfJyQzxRZC0ZX9nWLaW8ZItogZl7OUc1Dd9HgsAszNv-AX-fEuOYEO4vJiFrp-wQiW_79T3z3xVUjDsQ4nqM0cbKymMzAZ-cQ465lk12d1lwIaHlSoKVXt9Gub99CRs-dK3P_OyQpHVBNtNxNICtzxsaifXEbjlG8hBn45coTxnNtnqallW0DaKonh61qfzJvX6KA0UkQpXVzI9EdV-wNWcul8tNFeCFBCvvjrLNs_vVQ HTTP/1.1
Host: cdn4.cdn-telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 206 Partial Content
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: video/mp4
content-length: 47087
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
cache-control: public,max-age=7200
etag: "fdd0b996355815a5218b7b742545a860042ff8d6"
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-range: bytes 0-47086/47087
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn4.cdn-telegram.org/file/fGzA8PF3Y_6RWmfFCtMGjQDcUD6N0GlFSO7V3TI9ssT_LHJ5YuCOnWQrsoe2AVdXmHbEjEO-uPh0aT7wNMEbY5Nl5sTw3c1-IpK2-s0QbdbKTTJoN9XVFKjde122FjyKn4OaCsKUQUk0bEVjWtFwEQbpU5e476pWm3RaaHGQTR2YuPM8VJn1aLjAH-1gNIrbVsYEOnMy34OIOMehZpkK6EBVbkR4D2bO4SiLK0Hb2HRw51nnALq60z1bUDEihzh_Sjpm9X0oeSz6HYCueBy8DV7gfN3JPXu1h2oYzte5PStTmDkD6hbgVqe1NrRypkEPKmOQZtotjY96w45fC7cYdA
200 OK 12 kB URL GET HTTP/2 cdn4.cdn-telegram.org/file/fGzA8PF3Y_6RWmfFCtMGjQDcUD6N0GlFSO7V3TI9ssT_LHJ5YuCOnWQrsoe2AVdXmHbEjEO-uPh0aT7wNMEbY5Nl5sTw3c1-IpK2-s0QbdbKTTJoN9XVFKjde122FjyKn4OaCsKUQUk0bEVjWtFwEQbpU5e476pWm3RaaHGQTR2YuPM8VJn1aLjAH-1gNIrbVsYEOnMy34OIOMehZpkK6EBVbkR4D2bO4SiLK0Hb2HRw51nnALq60z1bUDEihzh_Sjpm9X0oeSz6HYCueBy8DV7gfN3JPXu1h2oYzte5PStTmDkD6hbgVqe1NrRypkEPKmOQZtotjY96w45fC7cYdA
IP
Requested by https://t.me/L1ptoncasino/2?embed=1&mode=tme
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.cdn-telegram.org
Fingerprint79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC
ValiditySat, 04 Nov 2023 08:54:58 GMT - Fri, 02 Feb 2024 09:46:50 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x267, components 3\012- data
Hash 9c24ec02d433cbaff77a7f1e79940624
0e6908e5686e39f129a20d9816b938b65455b3a4
ccc014e63911b260b34e2cf0314dc8d352f20e8976b87ca06886afcfb68278fe
GET /file/fGzA8PF3Y_6RWmfFCtMGjQDcUD6N0GlFSO7V3TI9ssT_LHJ5YuCOnWQrsoe2AVdXmHbEjEO-uPh0aT7wNMEbY5Nl5sTw3c1-IpK2-s0QbdbKTTJoN9XVFKjde122FjyKn4OaCsKUQUk0bEVjWtFwEQbpU5e476pWm3RaaHGQTR2YuPM8VJn1aLjAH-1gNIrbVsYEOnMy34OIOMehZpkK6EBVbkR4D2bO4SiLK0Hb2HRw51nnALq60z1bUDEihzh_Sjpm9X0oeSz6HYCueBy8DV7gfN3JPXu1h2oYzte5PStTmDkD6hbgVqe1NrRypkEPKmOQZtotjY96w45fC7cYdA HTTP/1.1
Host: cdn4.cdn-telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: image/jpeg
content-length: 12357
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "25b88b646605aa7d57cce189bb64d0a689c135ec"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
t.me/L1ptoncasino/2?embed=1&mode=tme
200 OK 24 B URL GET HTTP/2 t.me/L1ptoncasino/2?embed=1&mode=tme
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2
Certificate IssuerGoDaddy.com, Inc.
Subject*.t.me
FingerprintD7:CC:2A:92:7B:DC:AE:6A:D7:92:51:20:49:AD:3B:AC:F9:27:F8:16
ValidityFri, 06 Oct 2023 19:50:31 GMT - Wed, 06 Nov 2024 19:50:31 GMT
File type ASCII text, with no line terminators
Hash b326b5062b2f0e69046810717534cb09
5ffe533b830f08a0326348a9160afafc8ada44db
b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b
POST /L1ptoncasino/2?embed=1&mode=tme HTTP/1.1
Host: t.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: application/x-www-form-urlencoded
Content-Length: 5
Origin: https://t.me
DNT: 1
Connection: keep-alive
Referer: https://t.me/L1ptoncasino/2?embed=1&mode=tme
Cookie: stel_ssid=fac18835dfb8f22d8e_3105455367940525189; stel_on=1; stel_dt=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: application/json; charset=utf-8
content-length: 24
pragma: no-cache
cache-control: no-store
content-encoding: gzip
strict-transport-security: max-age=35768000
X-Firefox-Spdy: h2
t.me/v/?views=eyJjIjotMTU2MDc3NDQ1NCwicCI6MiwidCI6MTcwMTE4OTExNSwiaCI6IjliNDIxOWJiMTQxYTIzMTg3NiJ9
200 OK 24 B URL GET HTTP/2 t.me/v/?views=eyJjIjotMTU2MDc3NDQ1NCwicCI6MiwidCI6MTcwMTE4OTExNSwiaCI6IjliNDIxOWJiMTQxYTIzMTg3NiJ9
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2?embed=1&mode=tme
Certificate IssuerGoDaddy.com, Inc.
Subject*.t.me
FingerprintD7:CC:2A:92:7B:DC:AE:6A:D7:92:51:20:49:AD:3B:AC:F9:27:F8:16
ValidityFri, 06 Oct 2023 19:50:31 GMT - Wed, 06 Nov 2024 19:50:31 GMT
File type ASCII text, with no line terminators
Hash b326b5062b2f0e69046810717534cb09
5ffe533b830f08a0326348a9160afafc8ada44db
b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b
GET /v/?views=eyJjIjotMTU2MDc3NDQ1NCwicCI6MiwidCI6MTcwMTE4OTExNSwiaCI6IjliNDIxOWJiMTQxYTIzMTg3NiJ9 HTTP/1.1
Host: t.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://t.me/L1ptoncasino/2?embed=1&mode=tme
Cookie: stel_ssid=fac18835dfb8f22d8e_3105455367940525189; stel_on=1; stel_dt=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: application/json; charset=utf-8
content-length: 24
pragma: no-cache
cache-control: no-store
content-encoding: gzip
strict-transport-security: max-age=35768000
X-Firefox-Spdy: h2
telegram.org/js/widget-frame.js?62
200 OK 30 kB URL GET HTTP/2 telegram.org/js/widget-frame.js?62
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2?embed=1&mode=tme
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type Unicode text, UTF-8 text, with very long lines (3713)
Hash 4f69bdfbc737a72c9c799d86e1853bfb
ad36e2beea1613ce12482b75613796f03d1d7944
6d25adc6fd6a57043975dd0ad3f396d5791f65f9515f5567924d0198e5e0776d
GET /js/widget-frame.js?62 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: application/javascript
last-modified: Thu, 20 Apr 2023 18:46:51 GMT
etag: W/"6441889b-16f16"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
oauth.tg.dev/js/telegram-widget.js?22
200 OK 20 kB URL GET HTTP/2 oauth.tg.dev/js/telegram-widget.js?22
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2?embed=1&mode=tme
Certificate IssuerGoDaddy.com, Inc.
Subject*.tg.dev
Fingerprint1D:F7:54:6D:98:FD:29:3E:1C:E7:C4:22:56:BE:42:4A:53:4D:7E:C4
ValidityThu, 06 Apr 2023 11:57:47 GMT - Tue, 07 May 2024 11:57:47 GMT
File type ASCII text, with very long lines (423)
Hash 1ff8b98c72268de58837846f2056c65a
e77fcc14f1efd17d319c9f82627e5789333b9dbe
0f6cdd09b3bbebf50c4e1679aff6f021f5e183a4ba2dea3a0801394599ff6afd
GET /js/telegram-widget.js?22 HTTP/1.1
Host: oauth.tg.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: application/javascript
last-modified: Mon, 03 Apr 2023 11:46:12 GMT
etag: W/"642abc84-4ff5"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/img/emoji/40/F09F8C9F.png
200 OK 2.6 kB URL GET HTTP/2 telegram.org/img/emoji/40/F09F8C9F.png
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2?embed=1&mode=tme
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash b7c477edbe26884ba6a0f79d309adcb1
45cea70088369c7ea031d3f99d56c64742c34508
4b9692a6b305520d148ca934a8184094dd8493dfa7ffd112b33b66aa02c8e147
GET /img/emoji/40/F09F8C9F.png HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: image/png
content-length: 2572
last-modified: Fri, 01 Nov 2019 00:04:50 GMT
etag: "5dbb76a2-a0c"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
telegram.org/img/website_icon.svg?4
200 OK 1.9 kB URL GET HTTP/2 telegram.org/img/website_icon.svg?4
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (1968), with no line terminators
Hash 5caca7ae1cffb3da0b06150a15020005
04cfb934f238d33209406393a3fbf78454815739
1ea747a06fbc240c2594a8c523cb248bbda4784f0fcad9d0f06334f1a378604f
GET /img/website_icon.svg?4 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: image/svg+xml
last-modified: Mon, 20 Jul 2020 20:41:37 GMT
etag: W/"5f160181-768"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
301 Moved Permanently 15 kB URL User Request GET HTTP/2 IP
Certificate IssuerGoogle Trust Services LLC
Subjectsratabuk.sa
FingerprintD4:D4:11:AD:9E:B6:2D:30:DF:2C:EC:9B:7D:3C:D1:41:7F:27:6F:17
ValiditySat, 14 Oct 2023 00:33:41 GMT - Fri, 12 Jan 2024 00:33:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: sratabuk.sa
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Tue, 28 Nov 2023 16:31:54 GMT
location: https://t.me/L1ptoncasino/2
cache-control: max-age=3600
expires: Tue, 28 Nov 2023 17:31:54 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gyWln%2BWY%2BNaatVAxqIhaA%2BeTURCsrvybDPv%2Fj6ogQaTfFfQr%2F2IP3EDcGC%2BFOYhVni9X4vu3VwcCqBptDhS1jsmg0iE%2FKTxyxGHPMnkk4QOwFNVV5QKYOREOGQ9pFw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82d400fc78c1b524-OSL
X-Firefox-Spdy: h2
telegram.org/img/tgme/pattern.svg?1
200 OK 232 kB URL GET HTTP/2 telegram.org/img/tgme/pattern.svg?1
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size 232 kB (231706 bytes)
Hash d0c22c6a97023d85ba6e644a41c44a5d
4284efb616c182da4450c123174ce0e81a322845
118add53487c02aaf5b5ab9f69380fa06717deb10492e14aaa487e3c62806ad4
GET /img/tgme/pattern.svg?1 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/css/telegram.css?236
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: image/svg+xml
last-modified: Thu, 05 Jan 2023 17:52:04 GMT
etag: W/"63b70e44-3891a"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/img/emoji/40/F09F8EB0.png
200 OK 3.5 kB URL GET HTTP/2 telegram.org/img/emoji/40/F09F8EB0.png
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2?embed=1&mode=tme
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 70dc89161846cac71d5573d66a37bbfb
5dbcbf3ecf09dc43ad9d34b5ce77d0a22d1584c7
889983326b8fb0616e832f70f263e8018883de69b7ea67330b1bf95ce584a7cb
GET /img/emoji/40/F09F8EB0.png HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: image/png
content-length: 3479
last-modified: Fri, 01 Nov 2019 00:04:50 GMT
etag: "5dbb76a2-d97"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
telegram.org/js/telegram-widget.js?22
200 OK 20 kB URL GET HTTP/2 telegram.org/js/telegram-widget.js?22
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type ASCII text, with very long lines (423)
Hash 1ff8b98c72268de58837846f2056c65a
e77fcc14f1efd17d319c9f82627e5789333b9dbe
0f6cdd09b3bbebf50c4e1679aff6f021f5e183a4ba2dea3a0801394599ff6afd
GET /js/telegram-widget.js?22 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: application/javascript
last-modified: Mon, 03 Apr 2023 11:46:12 GMT
etag: W/"642abc84-4ff5"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/css/widget-frame.css?66
200 OK 83 kB URL GET HTTP/2 telegram.org/css/widget-frame.css?66
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2?embed=1&mode=tme
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type ASCII text, with very long lines (1653)
Hash f80deb4a4fc00fa54cf4a1617ffaad1e
52f5528aa59e0ad22c5103318a86a4c421d45b34
d61214fdf1c1eee41b83cb56d52b82db20a47bfeab5248bb6fda7a4f0744eedf
GET /css/widget-frame.css?66 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: text/css
last-modified: Sat, 01 Apr 2023 17:42:21 GMT
etag: W/"64286cfd-1456a"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2
200 OK 11 kB URL GET HTTP/2 telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/L1ptoncasino/2?embed=1&mode=tme
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type Web Open Font Format (Version 2), TrueType, length 11072, version 1.0\012- data
Hash e7df3d0942815909add8f9d0c40d00d9
cf5032eea3399a58870e8a05e629b006a8c7c3c7
bce2f309470952b7affa62ff4d91b454334c68cefa541429b502904d20696875
GET /fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://t.me
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 28 Nov 2023 16:31:55 GMT
content-type: application/octet-stream
content-length: 11072
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: "63512b7d-2b40"
expires: Sat, 02 Dec 2023 16:31:55 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
172.67.177.5
149.154.167.99
104.21.35.157