sanzgroup.ru/media/dchse/80afba816d092745ce453e29aace443b/login.php?cmd=login_submit&id=002f09a3d0bf483d8899635cae75241e002f09a3d0bf483d8899635cae75241e&session=002f09a3d0bf483d8899635cae75241e002f09a3d0bf483d8899635cae75241e/
94.142.138.16 194 B URL sanzgroup.ru/media/dchse/80afba816d092745ce453e29aace443b/login.php?cmd=login_submit&id=002f09a3d0bf483d8899635cae75241e002f09a3d0bf483d8899635cae75241e&session=002f09a3d0bf483d8899635cae75241e002f09a3d0bf483d8899635cae75241e/
IP 94.142.138.16:0
ASN #35196 Ihor Hosting LLC
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 6b0c3253fef55645cec5cb3297da38b0
03ccc3e98e67cbc86048f7adc93c4d592607a147
12f9b547c7313022519ac5094621532477ce5491ef0a74c1aaa4d0923ddb4de1
NIDS Severity Alert suricata high ET PHISHING Generic Phishkit Activity (GET)
GET /media/dchse/80afba816d092745ce453e29aace443b/login.php?cmd=login_submit&id=002f09a3d0bf483d8899635cae75241e002f09a3d0bf483d8899635cae75241e&session=002f09a3d0bf483d8899635cae75241e002f09a3d0bf483d8899635cae75241e/ HTTP/1.1
Host: sanzgroup.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 503 Service Temporarily Unavailable
Server: openresty
Date: Fri, 02 Jun 2023 03:23:06 GMT
Content-Type: text/html
Content-Length: 194
Connection: keep-alive
sanzgroup.ru/media/dchse/80afba816d092745ce453e29aace443b/login.php?cmd=login_submit&id=002f09a3d0bf483d8899635cae75241e002f09a3d0bf483d8899635cae75241e&session=002f09a3d0bf483d8899635cae75241e002f09a3d0bf483d8899635cae75241e/
94.142.138.16 237 B URL sanzgroup.ru/media/dchse/80afba816d092745ce453e29aace443b/login.php?cmd=login_submit&id=002f09a3d0bf483d8899635cae75241e002f09a3d0bf483d8899635cae75241e&session=002f09a3d0bf483d8899635cae75241e002f09a3d0bf483d8899635cae75241e/
IP 94.142.138.16:0
ASN #35196 Ihor Hosting LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash ac9f8b1b2b31982ca70b2683ac079307
26a548173b52e8ab6d15d319cd262485f64ad33a
b967bb58f839d3a1caa064e620cd0a176905952ee08dc6e848b6768f83712336
NIDS Severity Alert suricata high ET PHISHING Generic Phishkit Activity (GET)
GET /media/dchse/80afba816d092745ce453e29aace443b/login.php?cmd=login_submit&id=002f09a3d0bf483d8899635cae75241e002f09a3d0bf483d8899635cae75241e&session=002f09a3d0bf483d8899635cae75241e002f09a3d0bf483d8899635cae75241e/ HTTP/1.1
Host: sanzgroup.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 02 Jun 2023 03:23:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.30
Content-Encoding: gzip
149.154.167.99200 OK 4.1 kB URL User Request GET HTTP/2 IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Certificate IssuerGoDaddy.com, Inc.
Subject*.t.me
Fingerprint83:E0:15:E5:1E:0D:A4:7F:F4:2E:EA:2C:AF:23:7A:12:2A:97:C2:6A
ValiditySat, 08 Oct 2022 07:21:51 GMT - Thu, 09 Nov 2023 07:21:51 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3560)
Hash ce322be9d44a99eef9b2ed3bcc16c7b3
97a9dd808be2ec5f0e5fea782ceddfc441a7ab62
5e323c918c21b08516f14a26b424099841a8d738546da1ec4e53bf3793cfdb97
GET /oksetra HTTP/1.1
Host: t.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 02 Jun 2023 03:23:06 GMT
content-type: text/html; charset=utf-8
content-length: 4148
set-cookie: stel_ssid=81ecf7e72d96783e2a_14453043051205231104; expires=Sat, 03 Jun 2023 03:23:06 GMT; path=/; samesite=None; secure; HttpOnly
pragma: no-cache
cache-control: no-store
x-frame-options: ALLOW-FROM https://web.telegram.org
content-security-policy: frame-ancestors https://web.telegram.org
content-encoding: gzip
strict-transport-security: max-age=35768000
X-Firefox-Spdy: h2
cdn5.telegram-cdn.org/file/bT4_FW_QTqV6DmWG5y4shWHbMgwudV3babmEdPa6G3Hdileczww_p5uQ8NRL5DTQFWwIXMgzfrRQwyRFY68Up93AGVPKxjbuvxupMTJimlw6JirQz4uGGp_Cn1dl1J3E--fYS6xChrLks5IwZbVOZTzDWwAkq9rCPUEguFDPGVHcoZnQkj3vhFU2z62edYfJlz_IIJLDEp_TmSpt7CN09I4sEbQ8ufKSak2-UaWAAaGZVHb4mEuBRjzkWnknQQekwd-1LrRvI9kuPAp-11ungBNf_x7XkQWvMrLezb-Zg9ryKLxtf95KCYBFvMhakRqNpA5XmQbViIY-bkR9Uw54hw.jpg
34.111.108.175200 OK 30 kB URL GET HTTP/2 cdn5.telegram-cdn.org/file/bT4_FW_QTqV6DmWG5y4shWHbMgwudV3babmEdPa6G3Hdileczww_p5uQ8NRL5DTQFWwIXMgzfrRQwyRFY68Up93AGVPKxjbuvxupMTJimlw6JirQz4uGGp_Cn1dl1J3E--fYS6xChrLks5IwZbVOZTzDWwAkq9rCPUEguFDPGVHcoZnQkj3vhFU2z62edYfJlz_IIJLDEp_TmSpt7CN09I4sEbQ8ufKSak2-UaWAAaGZVHb4mEuBRjzkWnknQQekwd-1LrRvI9kuPAp-11ungBNf_x7XkQWvMrLezb-Zg9ryKLxtf95KCYBFvMhakRqNpA5XmQbViIY-bkR9Uw54hw.jpg
IP 34.111.108.175:443
Certificate IssuerGoogle Trust Services LLC
Subjectcdn5.telegram-cdn.org
Fingerprint94:BB:AC:0F:0B:DD:05:94:05:F7:CB:22:D6:E0:5C:9F:25:A3:99:62
ValidityThu, 13 Apr 2023 11:40:47 GMT - Wed, 12 Jul 2023 12:36:02 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x320, components 3\012- data
Hash 4f5602111ada943f8016a9f4ef7ac3ef
c9d367bc07b8f4a2b1c3bffffba1a692a191eee8
bdff3e399e389106bccef24487ba0fa81d9a87224653fa8bd446861c71f9f7e6
GET /file/bT4_FW_QTqV6DmWG5y4shWHbMgwudV3babmEdPa6G3Hdileczww_p5uQ8NRL5DTQFWwIXMgzfrRQwyRFY68Up93AGVPKxjbuvxupMTJimlw6JirQz4uGGp_Cn1dl1J3E--fYS6xChrLks5IwZbVOZTzDWwAkq9rCPUEguFDPGVHcoZnQkj3vhFU2z62edYfJlz_IIJLDEp_TmSpt7CN09I4sEbQ8ufKSak2-UaWAAaGZVHb4mEuBRjzkWnknQQekwd-1LrRvI9kuPAp-11ungBNf_x7XkQWvMrLezb-Zg9ryKLxtf95KCYBFvMhakRqNpA5XmQbViIY-bkR9Uw54hw.jpg HTTP/1.1
Host: cdn5.telegram-cdn.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
content-length: 30046
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
date: Fri, 02 Jun 2023 03:22:48 GMT
etag: "fbcdd00d0f911ef4d455eaa105724eac6dd6c3f8"
content-type: image/jpeg
age: 19
cache-control: max-age=3600,public
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
telegram.org/css/bootstrap.min.css?3
149.154.167.99200 OK 21 kB URL GET HTTP/2 telegram.org/css/bootstrap.min.css?3
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
Fingerprint6B:78:D0:29:DF:A1:B1:16:30:8C:F2:FB:C5:BA:E6:EB:C6:21:C2:A5
ValidityWed, 10 Aug 2022 15:56:28 GMT - Mon, 11 Sep 2023 15:56:28 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 46923f55f27b05de14572e65d1ed5e40
be12b95ca5d74d96a03747e60b85c24d667c1896
7de51ed8467f5a44a5dd9a2bf44abedffdd10e71132d503b37a37c2d0b80e6a7
GET /css/bootstrap.min.css?3 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 02 Jun 2023 03:23:07 GMT
content-type: text/css
last-modified: Fri, 10 Nov 2017 17:54:14 GMT
etag: W/"5a05e7c6-a61b"
expires: Tue, 06 Jun 2023 03:23:07 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/js/tgwallpaper.min.js?3
149.154.167.99200 OK 13 kB URL GET HTTP/2 telegram.org/js/tgwallpaper.min.js?3
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
Fingerprint6B:78:D0:29:DF:A1:B1:16:30:8C:F2:FB:C5:BA:E6:EB:C6:21:C2:A5
ValidityWed, 10 Aug 2022 15:56:28 GMT - Mon, 11 Sep 2023 15:56:28 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 78b0923efe8540e7497e3617f083f61d
fed14b6465ed48b4ea3d874aea726e67cf5ca368
a0130ffb2c991b5120e649b6e61d68c55f5597420078ba7856918a1e5965da12
GET /js/tgwallpaper.min.js?3 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 02 Jun 2023 03:23:07 GMT
content-type: application/javascript
last-modified: Thu, 03 Mar 2022 19:57:25 GMT
etag: W/"62211da5-ba3"
expires: Tue, 06 Jun 2023 03:23:07 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfABc4AMP6lbBP.woff2
149.154.167.99200 OK 6.6 kB URL GET HTTP/2 telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfABc4AMP6lbBP.woff2
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
Fingerprint6B:78:D0:29:DF:A1:B1:16:30:8C:F2:FB:C5:BA:E6:EB:C6:21:C2:A5
ValidityWed, 10 Aug 2022 15:56:28 GMT - Mon, 11 Sep 2023 15:56:28 GMT
File type Web Open Font Format (Version 2), TrueType, length 6620, version 1.0\012- data
Hash 376ffe2ca0b038d08d5e582ec13a310f
ec85284f360bada79122b5dca3088103c769ca8a
2f662599cf4323a18b4f7da381a998a8873c0277fff2d866336f7ee943a102d6
GET /fonts/Roboto/KFOlCnqEu92Fr1MmWUlfABc4AMP6lbBP.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://t.me
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 02 Jun 2023 03:23:07 GMT
content-type: application/octet-stream
content-length: 6620
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: "63512b7d-19dc"
expires: Tue, 06 Jun 2023 03:23:07 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
telegram.org/css/font-roboto.css?1
149.154.167.99200 OK 89 kB URL GET HTTP/2 telegram.org/css/font-roboto.css?1
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
Fingerprint6B:78:D0:29:DF:A1:B1:16:30:8C:F2:FB:C5:BA:E6:EB:C6:21:C2:A5
ValidityWed, 10 Aug 2022 15:56:28 GMT - Mon, 11 Sep 2023 15:56:28 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 0286fc10e2bf9615107943c1c77d711a
d40344a48a7d2b214f1c809fee64d18d1c06b6e5
6f7a09af7951a0dc16f8d70bfa789622f5e2978751a8cf9abbb6285450c05e60
GET /css/font-roboto.css?1 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 02 Jun 2023 03:23:07 GMT
content-type: text/css
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: W/"63512b7d-1816"
expires: Tue, 06 Jun 2023 03:23:07 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/img/apple-touch-icon.png
149.154.167.99200 OK 5.6 kB URL GET HTTP/2 telegram.org/img/apple-touch-icon.png
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
Fingerprint6B:78:D0:29:DF:A1:B1:16:30:8C:F2:FB:C5:BA:E6:EB:C6:21:C2:A5
ValidityWed, 10 Aug 2022 15:56:28 GMT - Mon, 11 Sep 2023 15:56:28 GMT
File type PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced\012- data
Hash 295ccdb03006b8dfef45090dafbd46ac
491ab660270e47cbac6a5731c51cca71c1c1b2b1
a51d667d4262047c23e3a2a8aac3b46dc8a58c686cc013f2354011c07bf22cf3
GET /img/apple-touch-icon.png HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 02 Jun 2023 03:23:07 GMT
content-type: image/png
content-length: 5644
last-modified: Thu, 21 Apr 2022 13:47:47 GMT
etag: "62616083-160c"
expires: Tue, 06 Jun 2023 03:23:07 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
telegram.org/img/website_icon.svg?4
149.154.167.99200 OK 1.9 kB URL GET HTTP/2 telegram.org/img/website_icon.svg?4
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
Fingerprint6B:78:D0:29:DF:A1:B1:16:30:8C:F2:FB:C5:BA:E6:EB:C6:21:C2:A5
ValidityWed, 10 Aug 2022 15:56:28 GMT - Mon, 11 Sep 2023 15:56:28 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (1968), with no line terminators
Hash 5caca7ae1cffb3da0b06150a15020005
04cfb934f238d33209406393a3fbf78454815739
1ea747a06fbc240c2594a8c523cb248bbda4784f0fcad9d0f06334f1a378604f
GET /img/website_icon.svg?4 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 02 Jun 2023 03:23:07 GMT
content-type: image/svg+xml
last-modified: Mon, 20 Jul 2020 20:41:37 GMT
etag: W/"5f160181-768"
expires: Tue, 06 Jun 2023 03:23:07 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
149.154.167.99200 OK 11 kB URL GET HTTP/2 telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
Fingerprint6B:78:D0:29:DF:A1:B1:16:30:8C:F2:FB:C5:BA:E6:EB:C6:21:C2:A5
ValidityWed, 10 Aug 2022 15:56:28 GMT - Mon, 11 Sep 2023 15:56:28 GMT
File type Web Open Font Format (Version 2), TrueType, length 11028, version 1.0\012- data
Hash 1f6d3cf6d38f25d83d95f5a800b8cac3
279f300ca2cbbdf9f5036ef2f438607fbf377daa
796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f
GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://t.me
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 02 Jun 2023 03:23:07 GMT
content-type: application/octet-stream
content-length: 11028
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: "63512b7d-2b14"
expires: Tue, 06 Jun 2023 03:23:07 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
telegram.org/img/tgme/pattern.svg?1
149.154.167.99200 OK 232 kB URL GET HTTP/2 telegram.org/img/tgme/pattern.svg?1
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
Fingerprint6B:78:D0:29:DF:A1:B1:16:30:8C:F2:FB:C5:BA:E6:EB:C6:21:C2:A5
ValidityWed, 10 Aug 2022 15:56:28 GMT - Mon, 11 Sep 2023 15:56:28 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size 232 kB (231706 bytes)
Hash d0c22c6a97023d85ba6e644a41c44a5d
4284efb616c182da4450c123174ce0e81a322845
118add53487c02aaf5b5ab9f69380fa06717deb10492e14aaa487e3c62806ad4
GET /img/tgme/pattern.svg?1 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/css/telegram.css?236
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 02 Jun 2023 03:23:07 GMT
content-type: image/svg+xml
last-modified: Thu, 05 Jan 2023 17:52:04 GMT
etag: W/"63b70e44-3891a"
expires: Tue, 06 Jun 2023 03:23:07 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2
149.154.167.99200 OK 11 kB URL GET HTTP/2 telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
Fingerprint6B:78:D0:29:DF:A1:B1:16:30:8C:F2:FB:C5:BA:E6:EB:C6:21:C2:A5
ValidityWed, 10 Aug 2022 15:56:28 GMT - Mon, 11 Sep 2023 15:56:28 GMT
File type Web Open Font Format (Version 2), TrueType, length 11040, version 1.0\012- data
Hash 5e22a46c04d947a36ea0cad07afcc9e1
6091d981c2a4ee975c7f6b56186ee698040bb804
0f53e8b0a717ca4ce313eec62b90d41db62c2f4946259a65c93bf8e84c5b0c44
GET /fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://t.me
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 02 Jun 2023 03:23:07 GMT
content-type: application/octet-stream
content-length: 11040
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: "63512b7d-2b20"
expires: Tue, 06 Jun 2023 03:23:07 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
telegram.org/css/telegram.css?236
149.154.167.99200 OK 115 kB URL GET HTTP/2 telegram.org/css/telegram.css?236
IP 149.154.167.99:443
ASN #62041 Telegram Messenger Inc
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
Fingerprint6B:78:D0:29:DF:A1:B1:16:30:8C:F2:FB:C5:BA:E6:EB:C6:21:C2:A5
ValidityWed, 10 Aug 2022 15:56:28 GMT - Mon, 11 Sep 2023 15:56:28 GMT
File type ASCII text, with very long lines (1267)
Size 115 kB (114867 bytes)
Hash 0d209d756face073dd14a437f07e58b2
20cb9119fdd02921a6bd0b1500f78a0b76a7a5c0
acd326a9263ee8c4cbc757fed46333732a0e3f8f48d398cbd4f8e36a09fdaf76
GET /css/telegram.css?236 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 02 Jun 2023 03:23:07 GMT
content-type: text/css
last-modified: Mon, 20 Mar 2023 10:58:55 GMT
etag: W/"64183c6f-1c0b3"
expires: Tue, 06 Jun 2023 03:23:07 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2