{"report_id":"827fcb8a-0e46-4ef9-ae04-fcdb637e2413","version":6,"status":"done","tags":[],"date":"2023-11-28T07:38:38Z","url":{"schema":"http","addr":"wyone.co.in/","fqdn":"wyone.co.in","domain":"wyone.co.in","tld":"co.in"},"ip":{"addr":"188.114.96.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"final":{"url":{"schema":"https","addr":"t.me/L1ptoncasino/2","fqdn":"t.me","domain":"t.me","tld":"me"},"title":"Telegram: Contact @L1ptoncasino"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T10:20:20Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"t.me","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2010-05-20","domain_rank":6552,"first_seen":"2015-06-29 21:03:15","last_seen":"2023-11-27 21:55:12","alert_count":0,"request_count":5,"received_data":15923,"sent_data":2728,"comment":"","tags":null,"fingerprints":null},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":5408,"first_seen":"2013-12-18 14:14:30","last_seen":"2023-11-27 18:07:21","alert_count":0,"request_count":22,"received_data":610799,"sent_data":9977,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn4.cdn-telegram.org","ip":{"addr":"34.111.35.152","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-11-04","domain_rank":0,"first_seen":"2023-11-04 22:41:19","last_seen":"2023-11-27 14:57:48","alert_count":0,"request_count":3,"received_data":76529,"sent_data":2411,"comment":"","tags":null,"fingerprints":null},{"fqdn":"oauth.tg.dev","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2019-04-06","domain_rank":109403,"first_seen":"2019-06-09 11:38:14","last_seen":"2023-11-22 00:05:55","alert_count":0,"request_count":1,"received_data":20842,"sent_data":414,"comment":"","tags":null,"fingerprints":null},{"fqdn":"wyone.co.in","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"domain_registered":"2021-05-11","domain_rank":0,"first_seen":"2021-06-08 22:10:06","last_seen":"2023-05-15 05:37:19","alert_count":0,"request_count":1,"received_data":15741,"sent_data":480,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2023-11-28T07:38:23Z","timestamp":1701157103,"ip_dst":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"Client IP","port":47846,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Telegram Domain (t .me in TLS SNI)","source":"{\"timestamp\":\"2023-11-28T07:38:23.562021+0000\",\"flow_id\":2045583819790211,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.109\",\"src_port\":47846,\"dest_ip\":\"149.154.167.99\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2041933,\"rev\":1,\"signature\":\"ET INFO Observed Telegram Domain (t .me in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2022_06_24\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"former_sid\":[\"2851827\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_06_24\"]}},\"tls\":{\"sni\":\"t.me\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":906,\"bytes_toclient\":4500,\"start\":\"2023-11-28T07:38:23.513923+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-11-28T07:38:38Z","timestamp":1701157118,"ip_dst":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"ip_src":{"addr":"Client IP","port":40472,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Telegram Domain (t .me in TLS SNI)","source":"{\"timestamp\":\"2023-11-28T07:38:38.707926+0000\",\"flow_id\":989829319756884,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.109\",\"src_port\":40472,\"dest_ip\":\"149.154.167.99\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2041933,\"rev\":1,\"signature\":\"ET INFO Observed Telegram Domain (t .me in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2022_06_24\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"former_sid\":[\"2851827\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_06_24\"]}},\"tls\":{\"sni\":\"t.me\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":4022,\"start\":\"2023-11-28T07:38:38.658516+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"t.me/L1ptoncasino/2","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2058ccc168104620569fed8ee02b426","sha1":"02bf0224da2022db6cf629dfd6ae647e75917257","sha256":"0118ab9ef064e11475deef6597df9c7548bf41213f4591e22063953d06e1f114","sha512":"91e3b385cff786758c345a3b09002890bdbc95acad8c6318aa6724330625e34524b7be5bea47f4282a58d175c8bc1cf5f62b16bb171e40e2e21db2882444f26c","ssdeep":"","tlshash":"80d022cf3128885800fe3fe4f333be82b0339ac8e0823d60c92a2cc12164487c8193c0","size":210,"data":"","first_seen":"2023-11-18T00:28:43Z","last_seen":"2025-01-26T10:53:00.280583Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/tgwallpaper.min.js?3","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b89d34702716a8ad2cc3977718f53a3","sha1":"04406ebd6a9e2ce79dbac5e5048cfe1384e4574a","sha256":"2031e418ee10af8110729b3f327b968462fc0a9d8d1da095387bb472ccd0dee6","sha512":"e6fbda1e7d1e24c0db5a724e4cd30c883ceb5d35de1cc6ab8851c9b19e202024752e7e42aecc21002f9f9684ea98775f1ebe0ee8da9bd7562dac2fe171464242","ssdeep":"","tlshash":"b151631a2790624df7251a927d7f036651b0a931e83790600a2ef4cbbcfced112e9e5e","size":2979,"data":"","first_seen":"2023-03-07T01:31:07Z","last_seen":"2026-05-07T18:07:09.752984Z","times_seen":66786,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.me/L1ptoncasino/2?embed=1\u0026mode=tme","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"6b13c10482d8dd4cf16086f177f6447a","sha1":"100dafaabd1806e10b09cfe22eb9e82ce255cd00","sha256":"bfeef77a694240beb1c621018eae0f31d228ecd47919e3edb32871859f13b772","sha512":"71786cdd5ca1bea8d3ad205ed32897f82670b68542b6828f5009c58c060a7014ee916d0087686d778295ba3f314aa946a3960526193c122b46c187a519e033f8","ssdeep":"","tlshash":"17b02b110630480d6846058c23772d8cc8a85b701c291608be0a34b007588030503520","size":129,"data":"","first_seen":"2023-04-07T09:51:01Z","last_seen":"2025-03-01T02:24:37.532928Z","times_seen":482,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.me/L1ptoncasino/2?embed=1\u0026mode=tme","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T17:57:28.492271Z","times_seen":14799076,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oauth.tg.dev/js/telegram-widget.js?22","fqdn":"oauth.tg.dev","domain":"tg.dev","tld":"dev"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ff8b98c72268de58837846f2056c65a","sha1":"e77fcc14f1efd17d319c9f82627e5789333b9dbe","sha256":"0f6cdd09b3bbebf50c4e1679aff6f021f5e183a4ba2dea3a0801394599ff6afd","sha512":"1a680a7e87f16520da934f4034cdc601ebef9c306c7f5e3ea165588f044142cadcf5eb06cefedc8ea7768ff63830586a2776351c7b9429f1e33b639adca5f1ed","ssdeep":"384:+vLsc8o/o9o7IFdWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SU0CF3gLcHPb","tlshash":"2492819e1af72224a567713a4b5fa1093232e163700ddc503e6c5b90bf90a6767b0fdd","size":20469,"data":"","first_seen":"2023-04-05T01:44:44Z","last_seen":"2026-05-07T14:17:34.066244Z","times_seen":2622,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.me/L1ptoncasino/2?embed=1\u0026mode=tme","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ee83c9932d8020dbf1f81dd0f590be0","sha1":"da16bbeebd9028eca0271200c0b52de657572467","sha256":"5340ed1247bcf19d30674165bb2ba93431871f4a601450a5c9d286ad3e5c33fc","sha512":"ad1115ec33ab33e8482c683c7cc4652c933c12d577eccede169c039946203242c6e09b2791825307c915fe56ea9e208d2f98a6ae332d0cd53d8315334920e363","ssdeep":"","tlshash":"0280000023382000228a2822c00bb2f23280e0003088208088020822c080802222a002","size":27,"data":"","first_seen":"2023-03-09T05:49:20Z","last_seen":"2026-05-07T03:58:09.911611Z","times_seen":750,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.me/L1ptoncasino/2?embed=1\u0026mode=tme","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"472433e424a30004722f7a3119a2aa7e","sha1":"dccf92e5f3c9a5ecb35814af475f9a4cac8683e1","sha256":"540f7ff4a52f5b078a4b47eada02b6b7e19a7354f9b05256f6629eae3da9bdbb","sha512":"c15b2022be6a0ce0d037c0981d42eeb7d3c9a8efdb8c3b758b7dfee8b5885827bf6ba708ad9451c5ef8c438e41179d2ad88e68ef16cd3b21c1941a9efb2d88ab","ssdeep":"","tlshash":"5ae068e3e027e682c1995cba7662df16605757596c7f1c32d948dbef51040bc14f322c","size":392,"data":"","first_seen":"2023-04-07T09:51:03Z","last_seen":"2025-03-01T02:24:37.541424Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.me/L1ptoncasino/2","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c629a0c52a2afad699d260f673481fd","sha1":"a4fd0ed3e5daa31480eb6de0faa5d442f015cbf6","sha256":"ea0d804370930ee958af535ce56cddf1dda419bdc676315ae8af0fbb4c733471","sha512":"dac369a2699b0f8a0d32acfcdd5c43c73d77e3dbd07dda400d0087608fd5e3f857d6952b730d1ce20f89d095f67794d3549dfc16181276b92e550bb76c7e0a53","ssdeep":"","tlshash":"57c012b42900643a2daa096cb636dbe83d321563f2a23410e22cc16c0021ed31000ec8","size":193,"data":"","first_seen":"2023-03-07T01:31:07Z","last_seen":"2026-05-07T18:07:09.761172Z","times_seen":58937,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/widget-frame.js?62","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"a513d85718a50b7e199640dd0593f02b","sha1":"b9b4177465ae35e0df804a5c3af19303c285d44a","sha256":"83c9e90b103b22a4da56d4d9c5e1d3f29f30f5bf97039c0ac82f1ea56d40f140","sha512":"8fe28c4a30feb30aae9b96356e2cd5521effd76f9188d7fda755e74dd482d1bbce41e969430c881011a9f2e4a6c486abef5b69d193487ce5339bf6d2033e3128","ssdeep":"768:a3+62J1xNNt3p1SG6CwPHG+AIieDPxsyk7W9vwCiPZZeRrZ+rgbQafIw8JBgHAta:+j2jNt3Qsyk7glZ+ksv7e6a","tlshash":"e893404d69f33066a577b17a9baf55093635d003110ece217d0ca394af84934abfabf8","size":93973,"data":"","first_seen":"2023-04-20T22:54:12Z","last_seen":"2025-01-01T12:36:20.095736Z","times_seen":699,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.me/L1ptoncasino/2","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f5086248b276689e8674e334d5e8bee","sha1":"23194414829a816faba4f5a05912714e740dcc93","sha256":"396c9e5c971ad9ec14a30e3e63915aa3bc59a8d3ede590e32b481931519b843f","sha512":"a44c04a57a0ca5438fb48fa4a392f34a23c4b8ce8df2c250f15de2f48a2a652cff92f8816c02c3751884e7cf09005f4bc1615899cfa724b7e72e23d7e249b491","ssdeep":"48:RxvQJmSbD3SNny7RJS9XbRM7iBIjUfU7Ub+MtLbIjubXH8bRLbVk4ig7iwjLFc90:RxocSqy7VaiE2t90uGa+yP","tlshash":"08910c1634f5263b58a728be14af87a43635d1c5a045de017ebce284af70ae71473bca","size":4576,"data":"","first_seen":"2023-11-18T00:28:44Z","last_seen":"2025-01-26T10:53:00.284494Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"t.me/L1ptoncasino/2","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-11-28T07:38:23.497Z","timestamp":1701157103497,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.t.me","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 06 Oct 2023 19:50:31 GMT","end":"Wed, 06 Nov 2024 19:50:31 GMT"},"fingerprint":{"sha1":"D7:CC:2A:92:7B:DC:AE:6A:D7:92:51:20:49:AD:3B:AC:F9:27:F8:16","sha256":"99:4B:E6:3A:1C:4B:21:28:BE:BD:E2:E4:93:BD:44:3C:46:50:AB:9D:06:92:EA:73:37:58:4A:44:32:AE:6D:9F"}}},"request":{"raw":"GET /L1ptoncasino/2 HTTP/1.1\r\nHost: t.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:20 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 5297\r\nset-cookie: stel_ssid=d0724a98e05423c4d8_3959180268430181307; expires=Wed, 29 Nov 2023 07:38:20 GMT; path=/; samesite=None; secure; HttpOnly\r\npragma: no-cache\r\ncache-control: no-store\r\nx-frame-options: ALLOW-FROM https://web.telegram.org\r\ncontent-security-policy: frame-ancestors https://web.telegram.org\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=35768000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5297,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3560)","md5":"dbd1e9b47007ec3eedfc9d2d8a69178f","sha1":"703f7e634fc82ac234a64f4678fea6cc895a3fd4","sha256":"92543a0c0fe8fdd281ae9303c644058e898e7feab74abbdf5a6a6dc26e68f79f","sha512":"84d7ef2640d58b042fbc35b44668caddb63b3be72e4a0d8fe3681570a0c11d4499410a0426a3cc8c88e3d8306134468e8739791c05be10fbfdfb6a673730a4ea","ssdeep":"384:j9UH0H70HaS9plFoxItVHPOqVbeK+DTS4:j9UH0b0FplFoxKLVJ+3S4","tlshash":"486208c337f0452a1593487aae2fb6583635e0c7f0246d00beadd55a8fa2ed25833bc5","first_seen":"2023-11-28T08:38:39Z","last_seen":"2023-11-28T08:38:39Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2189,"timings":{"blocked":1072,"dns":19,"connect":23,"send":0,"wait":42,"receive":1,"ssl":1030},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme","date":"2023-11-28T07:38:26.417Z","timestamp":1701157106417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://t.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11028\r\nlast-modified: Thu, 20 Oct 2022 11:05:33 GMT\r\netag: \"63512b7d-2b14\"\r\nexpires: Sat, 02 Dec 2023 07:38:22 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11028,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 11028, version 1.0\\012- data","md5":"1f6d3cf6d38f25d83d95f5a800b8cac3","sha1":"279f300ca2cbbdf9f5036ef2f438607fbf377daa","sha256":"796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f","sha512":"716305f4d2582683b64c61b5e2390983579ea0fb33c936dd3ea8362872176625fbcb6f5ad18d2abf85da82d14c33a9640dfc5749922cb2fc079ddf37864f361f","ssdeep":"192:4oijUxKA0B3BxJPeLrh00JWNhi5A5HWdZ6SfroKthzwbMcYfQKvwpFVX2T+:Nx4bexHAE6STltlwbMcovaET+","tlshash":"9032cf5eaa417172974b5791e296fbc0e627186438fb02fef85185bbc4045e437092be","first_seen":"2023-04-05T08:50:36Z","last_seen":"2026-05-07T18:07:09.754836Z","times_seen":74150,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.me/L1ptoncasino/2?embed=1\u0026mode=tme","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme","date":"2023-11-28T07:38:27.575Z","timestamp":1701157107575,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.t.me","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 06 Oct 2023 19:50:31 GMT","end":"Wed, 06 Nov 2024 19:50:31 GMT"},"fingerprint":{"sha1":"D7:CC:2A:92:7B:DC:AE:6A:D7:92:51:20:49:AD:3B:AC:F9:27:F8:16","sha256":"99:4B:E6:3A:1C:4B:21:28:BE:BD:E2:E4:93:BD:44:3C:46:50:AB:9D:06:92:EA:73:37:58:4A:44:32:AE:6D:9F"}}},"request":{"raw":"GET /L1ptoncasino/2?embed=1\u0026mode=tme HTTP/1.1\r\nHost: t.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/L1ptoncasino/2\r\nCookie: stel_ssid=d0724a98e05423c4d8_3959180268430181307\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 4315\r\nset-cookie: stel_on=1; expires=Mon, 25 Nov 2024 01:12:32 GMT; path=/; samesite=None; secure; HttpOnly\r\npragma: no-cache\r\ncache-control: no-store\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=35768000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4315,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1918)","md5":"04e8ce5040b490157cf58b7ea33b37d9","sha1":"6576c9a3112ea2e903d9c04a4694d7910cea86a6","sha256":"8ab70e189c07aadde12868b0dbbf364184d3f5c815d15552dc089568bf5bf1d3","sha512":"d4397606d7e862e930c233e9a108f385ad8304b8d7f1a49272f545fd1b163ea55ed9acd6e78d619df211a30ba4296b1cbbea591f216837bd765776a626100582","ssdeep":"192:LukACv/5ueLIxR/9NcYnTMiqdWM0HvEzBu9I6jC5n/Y+jMFpkYjBa4h:LTn5hIxR/9NcYngiIWM0H8RMFpkYjB1","tlshash":"5c12085343b2981b324341e7b65a7a1d7cc1d0dbf6299e497dae2171eb10ea0b43328e","first_seen":"2023-11-28T08:38:39Z","last_seen":"2023-11-28T08:38:39Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://t.me/L1ptoncasino/2","date":"2023-11-28T07:38:26.080Z","timestamp":1701157106080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://t.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11040\r\nlast-modified: Thu, 20 Oct 2022 11:05:33 GMT\r\netag: \"63512b7d-2b20\"\r\nexpires: Sat, 02 Dec 2023 07:38:22 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11040,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 11040, version 1.0\\012- data","md5":"5e22a46c04d947a36ea0cad07afcc9e1","sha1":"6091d981c2a4ee975c7f6b56186ee698040bb804","sha256":"0f53e8b0a717ca4ce313eec62b90d41db62c2f4946259a65c93bf8e84c5b0c44","sha512":"3e2dcb20c7416160573ea7c7a17bf7250132c5203161b03aeaa3cf065e3ce609da6d1b317d3739aad7fc0c092c44cd0c4ea5657a63bfa530c66f9b0ecb9daf15","ssdeep":"192:4Q49xPa2JiaMac+2d26KTpwgLfdRVH8Hfyj+lGSdVtxejHgwPvuD14CBt/F8bxt:4QcNc+2w6eJcIoGSdVtxoHgU+1B8bxt","tlshash":"3b32d0a8682c19fc49357837b8034109dfdfa1c1428c0a5633ebf5f45da3a264e2fe61","first_seen":"2023-04-05T08:50:36Z","last_seen":"2026-05-07T18:07:09.755741Z","times_seen":67895,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/apple-touch-icon.png","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/L1ptoncasino/2","date":"2023-11-28T07:38:26.154Z","timestamp":1701157106154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /img/apple-touch-icon.png HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 5644\r\nlast-modified: Thu, 21 Apr 2022 13:47:47 GMT\r\netag: \"62616083-160c\"\r\nexpires: Sat, 02 Dec 2023 07:38:22 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced\\012- data","md5":"295ccdb03006b8dfef45090dafbd46ac","sha1":"491ab660270e47cbac6a5731c51cca71c1c1b2b1","sha256":"a51d667d4262047c23e3a2a8aac3b46dc8a58c686cc013f2354011c07bf22cf3","sha512":"90bf3871af6d20372e1b7daa177afccaa16d30970873c2a1363d05fc49eca24b18e406835da051d79887e0e223aae345fd797cfa479f324f776e28b461b17bcd","ssdeep":"96:ZKgGepqI/QddfO0T+kST5610/DXhkyFBKNpu7UhDjuTu+uCCar+0xWl/rB61LVWR:yesBf+DNPVFANc7UhDku5G+0xWl/t6OR","tlshash":"28c19eb8f6ed2e5bc5f28693eb472665b2972a208534c06053f1ea1bd7b2121b4c6342","first_seen":"2023-05-02T07:47:09Z","last_seen":"2026-05-07T18:07:09.756585Z","times_seen":68024,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/emoji/40/F09F9A80.png","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme","date":"2023-11-28T07:38:26.319Z","timestamp":1701157106319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /img/emoji/40/F09F9A80.png HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 2997\r\nlast-modified: Fri, 01 Nov 2019 00:04:50 GMT\r\netag: \"5dbb76a2-bb5\"\r\nexpires: Sat, 02 Dec 2023 07:38:22 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2997,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\\012- data","md5":"7de3e931c938142818815de65c5ff7b0","sha1":"b50fd49d456e757f47590fae3b26c6a728c3a648","sha256":"b09cb1f183ad143a1e9645642498f058b7cc36c7a74c331edf80230cf6b314fa","sha512":"8b6c9caa354841db359d79d55836c982225ccd59afab7bb2672eb26cf3aa3c61fde4da670844547672740c729ba4790056475eaedf435a73849dbdbaf7572aae","ssdeep":"","tlshash":"75514a2650aadb8a08057126d084069fecdec9bd1a539d62cdb8153877af216f8fa086","first_seen":"2023-05-17T04:14:44Z","last_seen":"2026-05-04T08:23:44.916922Z","times_seen":171,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/css/font-roboto.css?1","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://t.me/L1ptoncasino/2","date":"2023-11-28T07:38:24.911Z","timestamp":1701157104911,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /css/font-roboto.css?1 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Oct 2022 11:05:33 GMT\r\netag: W/\"63512b7d-1816\"\r\nexpires: Sat, 02 Dec 2023 07:38:22 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3397,"size_decoded":0,"mime_type":"text/css","magic":"gzip compressed data, max speed, from Unix\\012- data","md5":"41a4a615b8270e72da9ede9f514f07a9","sha1":"5788f99164424ed4e97ca09f2d31570d71eb7f36","sha256":"e0ccaa716d7526192e2e0d4e4afaa9076cecfbb8efebfaccdd543bc987ba546d","sha512":"1b075f8afd240c6567fa35f8c16877d3667c0f504a43900c32a137bc043939679cd16acd66e1756d865241d6cf30834f7a0a6c0d600c579a8be7c5f09c3200d7","ssdeep":"","tlshash":"60618fc3f172c22dcc10e2cd204414bef6ce15515baf8a7e184448aaad992ef18be18f","first_seen":"2023-11-28T08:38:39Z","last_seen":"2024-08-20T17:37:35.290497Z","times_seen":2,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":147,"dns":3,"connect":23,"send":0,"wait":33,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/widget-frame.js?62","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme","date":"2023-11-28T07:38:26.204Z","timestamp":1701157106204,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /js/widget-frame.js?62 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 20 Apr 2023 18:46:51 GMT\r\netag: W/\"6441889b-16f16\"\r\nexpires: Sat, 02 Dec 2023 07:38:22 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29042,"size_decoded":0,"mime_type":"application/javascript","magic":"gzip compressed data, max speed, from Unix\\012- data","md5":"760d0eb6b79318fd6aad1796fbb65a27","sha1":"74ff102b111cbd76316f0fda382a7e9f8640a1c2","sha256":"60188cfc7bd15d2f1b1dd152ee5564d0ddda6b082bc65f555b327e96a7972ec4","sha512":"34515d85dc79d47350f67da0c1a47d5b87f7e936988949533235f26e772b3a7958c9dcacc6b8693eab7f46179c90a1021c6c2d91a04285a34813e298ab49faca","ssdeep":"384:ONKFSRlciUM9LOvVT9idFe+BTvCJfvkyYZH+i2lbKTun49vn8S7A4xaK4jut12Ua:Os+OiUM9qvQBckVQ9X+hA44AVS3D","tlshash":"e4d2f1847fd8604a7ce554d01702d0bba52c81c393907946aacbcdad96ad72c6fcef89","first_seen":"2023-11-28T08:38:39Z","last_seen":"2023-11-28T08:38:39Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cdn-telegram.org/file/PNd76M7FVAErs1oVzdHqvpnALFktLBirqB9UGtrPvjoyDGeRmvfOqyyR5By1-cKtcFxyqfMoD4rjlNCvtq5umrrFXHW2iuEJx3T0V_6hyhk-dGoxXPdqt7iBbfl8gMorMGqjN-DDrZoDe90qHY3TNGdqGQ97OouGR5W6iWZ2h3lYHeK517tk1q-BKag7gxmegHbnVY5Vf4fZg8FC93_qHdqQnwxCgvDxMZY7xjXx2pwVR5dZaH1vXb9UnepgeRbZFvBTC5AHK4qt308VTr9w_592uzhMONuTGinPLdxQ34qnllmcEmxqA5dLZRrst_jlQNiFQtZhsjP-4qG0a1Fvpw.jpg","fqdn":"cdn4.cdn-telegram.org","domain":"cdn-telegram.org","tld":"org"},"ip":{"addr":"34.111.35.152","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme","date":"2023-11-28T07:38:26.200Z","timestamp":1701157106200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn1.cdn-telegram.org","organization":""},"issuer":{"commonName":"GTS CA 1D4","organization":"Google Trust Services LLC"},"validity":{"start":"Sat, 04 Nov 2023 08:54:58 GMT","end":"Fri, 02 Feb 2024 09:46:50 GMT"},"fingerprint":{"sha1":"79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC","sha256":"3D:04:CE:AE:BF:0F:31:61:D9:C6:7D:55:17:EE:39:04:A6:FD:9E:E4:86:D8:67:7B:E2:0B:D1:97:DE:17:B5:7D"}}},"request":{"raw":"GET /file/PNd76M7FVAErs1oVzdHqvpnALFktLBirqB9UGtrPvjoyDGeRmvfOqyyR5By1-cKtcFxyqfMoD4rjlNCvtq5umrrFXHW2iuEJx3T0V_6hyhk-dGoxXPdqt7iBbfl8gMorMGqjN-DDrZoDe90qHY3TNGdqGQ97OouGR5W6iWZ2h3lYHeK517tk1q-BKag7gxmegHbnVY5Vf4fZg8FC93_qHdqQnwxCgvDxMZY7xjXx2pwVR5dZaH1vXb9UnepgeRbZFvBTC5AHK4qt308VTr9w_592uzhMONuTGinPLdxQ34qnllmcEmxqA5dLZRrst_jlQNiFQtZhsjP-4qG0a1Fvpw.jpg HTTP/1.1\r\nHost: cdn4.cdn-telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15073\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'none'; sandbox\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccess-control-expose-headers: Accept-Ranges, Content-Range, Content-Length\r\naccept-ranges: bytes, bytes\r\ncache-control: public,max-age=7200\r\netag: \"e3f466c656f46fbbd441740aff5a66794467b9d4\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15073,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 160x160, components 3\\012- data","md5":"05dd747ac9de391c6337490e5b7c9cef","sha1":"835bd1ba7675b705351233c03ea3fccdaa7873ab","sha256":"d45f88f388c0c04c2cc9c90f29db37d031732b6543b3aa75d3ef9d1162a34469","sha512":"11128ca049666f8253880bd1ea4009ee9e639eb3d00b14bfff177ec6012a0de3ad1762d6fee57245a906a8d457243101b9750631fcd5fb0998d6dfd6b11492e8","ssdeep":"384:bH+ikUhik2J60axmeBizZuvQvJt+8YfVxaYcie:z+Vxk2J6+msZuv2JWdC","tlshash":"e662c01a55623742e48c1873dfe5056cc30878483835dff378c9af78a9be6855ee512e","first_seen":"2023-11-18T00:28:44Z","last_seen":"2025-01-26T10:53:00.261979Z","times_seen":34,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":86,"dns":18,"connect":8,"send":0,"wait":68,"receive":1,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/emoji/40/F09F8C9F.png","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme","date":"2023-11-28T07:38:26.350Z","timestamp":1701157106350,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /img/emoji/40/F09F8C9F.png HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 2572\r\nlast-modified: Fri, 01 Nov 2019 00:04:50 GMT\r\netag: \"5dbb76a2-a0c\"\r\nexpires: Sat, 02 Dec 2023 07:38:22 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\\012- data","md5":"b7c477edbe26884ba6a0f79d309adcb1","sha1":"45cea70088369c7ea031d3f99d56c64742c34508","sha256":"4b9692a6b305520d148ca934a8184094dd8493dfa7ffd112b33b66aa02c8e147","sha512":"1f023d196ac5457da0528bdd7555d14f2b8363db4eec34a08f44c46b1fbe6161a3d7262029d59304297e706ae3bb0a4270163b004c1b709f1102c84c91661321","ssdeep":"","tlshash":"c6514de7e4563c35cf3f865a221780f41d6429eb6b44891b1439f05ac26de8e21540b7","first_seen":"2023-06-20T19:37:53Z","last_seen":"2026-04-27T07:13:36.235729Z","times_seen":102,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/emoji/40/F09F8E89.png","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme","date":"2023-11-28T07:38:26.357Z","timestamp":1701157106357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /img/emoji/40/F09F8E89.png HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 3936\r\nlast-modified: Fri, 01 Nov 2019 00:04:50 GMT\r\netag: \"5dbb76a2-f60\"\r\nexpires: Sat, 02 Dec 2023 07:38:22 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3936,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\\012- data","md5":"2d723f73531704454d45d5e6c73e4071","sha1":"973087c416f9da392bfe9cd4356d0ade048a1e91","sha256":"48898dc208b2f39f137415688c89304b7a967178b374f0b7b8225108d2cfcfed","sha512":"2c1e5c7050baa598de2fbfd0c025a5467e352a05f21c74da5852e9331df86c07f832fd719cc7bd98f23dc885da04bef1cd5d774ee298750a3790e38e8f1f0590","ssdeep":"","tlshash":"69815ca92c6225ebcafd69b6e4c2c7d2a881eced094566901fca1dc3d1023e7462c275","first_seen":"2023-06-20T19:37:53Z","last_seen":"2026-05-07T14:17:34.067537Z","times_seen":150,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/emoji/40/F09F94A5.png","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme","date":"2023-11-28T07:38:26.359Z","timestamp":1701157106359,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /img/emoji/40/F09F94A5.png HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 2581\r\nlast-modified: Fri, 01 Nov 2019 00:04:50 GMT\r\netag: \"5dbb76a2-a15\"\r\nexpires: Sat, 02 Dec 2023 07:38:22 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2581,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\\012- data","md5":"77d1231b7757d5152d247457e3c14952","sha1":"d94776b0a2173b6e23003d1d093aa15fc802de96","sha256":"90b4abfa7281f9465c5d65947c7a035d414ec1add2729ad1a2a5dc2bb7bf9878","sha512":"73843aa945b6b6caf17d1328b1ab9c81687140444aec60ecc34d3b88ee4036eddb1d123e83bd8e0ee9b8cfe76b7c374eca35e04a5a783f5c26ffd1d0dbcc46a4","ssdeep":"","tlshash":"8f515d87b173a39efc325d5c9991d93cc5134101b172a8b0b9c55aa88f5bdef6e40cc1","first_seen":"2023-05-09T23:24:52Z","last_seen":"2026-05-07T14:17:34.100288Z","times_seen":344,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/emoji/40/F09F8EB0.png","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme","date":"2023-11-28T07:38:26.361Z","timestamp":1701157106361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /img/emoji/40/F09F8EB0.png HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 3479\r\nlast-modified: Fri, 01 Nov 2019 00:04:50 GMT\r\netag: \"5dbb76a2-d97\"\r\nexpires: Sat, 02 Dec 2023 07:38:22 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3479,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\\012- data","md5":"70dc89161846cac71d5573d66a37bbfb","sha1":"5dbcbf3ecf09dc43ad9d34b5ce77d0a22d1584c7","sha256":"889983326b8fb0616e832f70f263e8018883de69b7ea67330b1bf95ce584a7cb","sha512":"55d2d8bab59a76390a0a5d75a3ed379c93262b27e68729ea0967a30ee0fcd7adf2d876cfde393688f2c360c38f229cfcc1f06b36fb17e501f241c37c3cca60de","ssdeep":"","tlshash":"22716ea91b88fe830ced44019f5be0039b06465a4729581ed32f631c31a76b0b8acad1","first_seen":"2023-11-18T00:28:44Z","last_seen":"2026-03-27T12:12:19.359338Z","times_seen":41,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/emoji/40/E29CA8.png","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme","date":"2023-11-28T07:38:26.365Z","timestamp":1701157106365,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /img/emoji/40/E29CA8.png HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 1634\r\nlast-modified: Fri, 01 Nov 2019 00:04:50 GMT\r\netag: \"5dbb76a2-662\"\r\nexpires: Sat, 02 Dec 2023 07:38:22 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1634,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\\012- data","md5":"7206c1aa74f4c7bf72ddb027bbc6a279","sha1":"12eb33dfda7f8fa20824d32fe88178da3cf7ced7","sha256":"1a75341dc3bfd290fb1a2c77a29d24f5c1689eb99bf016e5bdfaf4e8366e8d0c","sha512":"b329a4ce1b1ff8550eb248b2354527cbbb166d53439b296426938bd91129912c68b4159fcd95d610d837dd70ed62f3839629030aa26b08a1abf8c46b37edbbc2","ssdeep":"","tlshash":"e931d8a750a7dd3d18180ae36bcf0474f260824152f61795c069e4c3a40df35dea2a61","first_seen":"2023-11-18T00:28:44Z","last_seen":"2026-04-29T23:46:16.236993Z","times_seen":162,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme","date":"2023-11-28T07:38:26.401Z","timestamp":1701157106401,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://t.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11072\r\nlast-modified: Thu, 20 Oct 2022 11:05:33 GMT\r\netag: \"63512b7d-2b40\"\r\nexpires: Sat, 02 Dec 2023 07:38:22 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11072,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 11072, version 1.0\\012- data","md5":"e7df3d0942815909add8f9d0c40d00d9","sha1":"cf5032eea3399a58870e8a05e629b006a8c7c3c7","sha256":"bce2f309470952b7affa62ff4d91b454334c68cefa541429b502904d20696875","sha512":"3632a44ee28aec0cf67ef7d3780a18db1aa84837817a3ea69a5f892d656a94b9faefc0314e2c38599410802f875df73581558ee9511ced7f717feda29336cfa0","ssdeep":"192:X+O5i60QYQyX4xOc50jR0ujO1W4qEaeFw1CsfCIRsiFDK5mvuGDP3dJGkWNZuQST:uLyYQ5Oc50+91W45FwRBseDT3fGklt1","tlshash":"6432be0ed131bba7c9fe1c3bae1307b072641e7a11badd6ab200eed5945f5a21c01db5","first_seen":"2023-04-06T07:37:44Z","last_seen":"2026-05-07T16:52:22.068519Z","times_seen":10478,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme","date":"2023-11-28T07:38:26.417Z","timestamp":1701157106417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://t.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11028\r\nlast-modified: Thu, 20 Oct 2022 11:05:33 GMT\r\netag: \"63512b7d-2b14\"\r\nexpires: Sat, 02 Dec 2023 07:38:22 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11028,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 11028, version 1.0\\012- data","md5":"1f6d3cf6d38f25d83d95f5a800b8cac3","sha1":"279f300ca2cbbdf9f5036ef2f438607fbf377daa","sha256":"796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f","sha512":"716305f4d2582683b64c61b5e2390983579ea0fb33c936dd3ea8362872176625fbcb6f5ad18d2abf85da82d14c33a9640dfc5749922cb2fc079ddf37864f361f","ssdeep":"192:4oijUxKA0B3BxJPeLrh00JWNhi5A5HWdZ6SfroKthzwbMcYfQKvwpFVX2T+:Nx4bexHAE6STltlwbMcovaET+","tlshash":"9032cf5eaa417172974b5791e296fbc0e627186438fb02fef85185bbc4045e437092be","first_seen":"2023-04-05T08:50:36Z","last_seen":"2026-05-07T18:07:09.754836Z","times_seen":74150,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cdn-telegram.org/file/EtqbFhtIzbspip4yMKU5yNdy_hEqcGRC_FHLtYlT3NxHH8LMdqVDMXueaZkojEjFDtYJ6Sa8pZiUDm9Z-gw7xCdi8BZcwnixkJW8NcrzQqPlQq0cWFAOruveBzs88NTJZuxFuynNftKnKX1nmwx0k9D2vByDgllcXfebo5qQLRO4cW1P7lSe4putBG9GVfAeJEXtJny_0d97leYAAt6rko-ph8vcY-q4qj2jQjlrhfZJAT4xWYVQW7D-OHG-eekaBtJ_WU6gBzNQJ5orzse1K58ULKz0d53Fgl61Esg_jlGjZi8xAhKCLvLjPbSXlcP3v_QuMkaCl4UkMzgn79pvRg","fqdn":"cdn4.cdn-telegram.org","domain":"cdn-telegram.org","tld":"org"},"ip":{"addr":"34.111.35.152","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme","date":"2023-11-28T07:38:26.317Z","timestamp":1701157106317,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn1.cdn-telegram.org","organization":""},"issuer":{"commonName":"GTS CA 1D4","organization":"Google Trust Services LLC"},"validity":{"start":"Sat, 04 Nov 2023 08:54:58 GMT","end":"Fri, 02 Feb 2024 09:46:50 GMT"},"fingerprint":{"sha1":"79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC","sha256":"3D:04:CE:AE:BF:0F:31:61:D9:C6:7D:55:17:EE:39:04:A6:FD:9E:E4:86:D8:67:7B:E2:0B:D1:97:DE:17:B5:7D"}}},"request":{"raw":"GET /file/EtqbFhtIzbspip4yMKU5yNdy_hEqcGRC_FHLtYlT3NxHH8LMdqVDMXueaZkojEjFDtYJ6Sa8pZiUDm9Z-gw7xCdi8BZcwnixkJW8NcrzQqPlQq0cWFAOruveBzs88NTJZuxFuynNftKnKX1nmwx0k9D2vByDgllcXfebo5qQLRO4cW1P7lSe4putBG9GVfAeJEXtJny_0d97leYAAt6rko-ph8vcY-q4qj2jQjlrhfZJAT4xWYVQW7D-OHG-eekaBtJ_WU6gBzNQJ5orzse1K58ULKz0d53Fgl61Esg_jlGjZi8xAhKCLvLjPbSXlcP3v_QuMkaCl4UkMzgn79pvRg HTTP/1.1\r\nHost: cdn4.cdn-telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12357\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'none'; sandbox\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccess-control-expose-headers: Accept-Ranges, Content-Range, Content-Length\r\naccept-ranges: bytes, bytes\r\ncache-control: public,max-age=7200\r\netag: \"25b88b646605aa7d57cce189bb64d0a689c135ec\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12357,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x267, components 3\\012- data","md5":"9c24ec02d433cbaff77a7f1e79940624","sha1":"0e6908e5686e39f129a20d9816b938b65455b3a4","sha256":"ccc014e63911b260b34e2cf0314dc8d352f20e8976b87ca06886afcfb68278fe","sha512":"7f8e254af850133a9b1f14b68c0c8462861aca641a49b02c386d5bf1e7470c125f8f18400ffbacde56f73ae8bf805fd6b7b0b38eee87ed5cc2f2cc5c561e0ceb","ssdeep":"384:zOGj0OQe5HfJbHssDJe1xcPSsodFvROwyyEZXeB:za6HdHss1eTbZ3OqCS","tlshash":"2642ae34c04bb523db2edc763ff25e2e869397468376ab3548c1261a3b886e20c7d45d","first_seen":"2023-11-18T00:28:44Z","last_seen":"2025-01-26T10:53:00.263294Z","times_seen":34,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn4.cdn-telegram.org/file/fc50275c3a.mp4?token=Xzq3hhwDoT3JqO5xFIgUuRUiGJgRz_SYOZHDRYy0DHMHOVTEIC7NFdx_Uxn5BJjiGRix9xqVKiaQm7HSGVBXuI9JEmrb3Yb0CfSd2H40Jd9HDuXPPuE4jAWPY9ZGti3SLVXq5MsQpMI9cT35RVg_7LZQNnD17S_tZCghKfWb0Q-0GrKkmwEOW5FdysHsYMda30BLY_SNYssZ2lyfpagO_gWTc8EDaPJsWYamcskR0uScfkYej0ZjgpBRvkAzYFeGSuFHzwcnCFgONqoVv8MwDnI3DiYb6N9jNBcZGyVODyLwJnDnIYFs0jljnp1TzedKHvAA537T2wjN6VAwj5fvKA","fqdn":"cdn4.cdn-telegram.org","domain":"cdn-telegram.org","tld":"org"},"ip":{"addr":"34.111.35.152","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme","date":"2023-11-28T07:38:26.434Z","timestamp":1701157106434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn1.cdn-telegram.org","organization":""},"issuer":{"commonName":"GTS CA 1D4","organization":"Google Trust Services LLC"},"validity":{"start":"Sat, 04 Nov 2023 08:54:58 GMT","end":"Fri, 02 Feb 2024 09:46:50 GMT"},"fingerprint":{"sha1":"79:F4:49:35:E7:E7:73:9F:FD:BE:84:5C:D4:FC:EA:06:91:E7:18:CC","sha256":"3D:04:CE:AE:BF:0F:31:61:D9:C6:7D:55:17:EE:39:04:A6:FD:9E:E4:86:D8:67:7B:E2:0B:D1:97:DE:17:B5:7D"}}},"request":{"raw":"GET /file/fc50275c3a.mp4?token=Xzq3hhwDoT3JqO5xFIgUuRUiGJgRz_SYOZHDRYy0DHMHOVTEIC7NFdx_Uxn5BJjiGRix9xqVKiaQm7HSGVBXuI9JEmrb3Yb0CfSd2H40Jd9HDuXPPuE4jAWPY9ZGti3SLVXq5MsQpMI9cT35RVg_7LZQNnD17S_tZCghKfWb0Q-0GrKkmwEOW5FdysHsYMda30BLY_SNYssZ2lyfpagO_gWTc8EDaPJsWYamcskR0uScfkYej0ZjgpBRvkAzYFeGSuFHzwcnCFgONqoVv8MwDnI3DiYb6N9jNBcZGyVODyLwJnDnIYFs0jljnp1TzedKHvAA537T2wjN6VAwj5fvKA HTTP/1.1\r\nHost: cdn4.cdn-telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 47087\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'none'; sandbox\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\naccess-control-expose-headers: Accept-Ranges, Content-Range, Content-Length\r\naccept-ranges: bytes\r\ncache-control: public,max-age=7200\r\netag: \"fdd0b996355815a5218b7b742545a860042ff8d6\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-range: bytes 0-47086/47087\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":47087,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\\012- data","md5":"c6a1e2f47c5026c5af5c6c46dd5fec75","sha1":"8003c9b1312cd07d42b25caea42543fe92477ca6","sha256":"1640fd0e48b7fb8877e9ed72e528fc88a769cdba15d32dfcaea91a87305ce9be","sha512":"e4a27703138ea40cab54da5140443c3db1c8ddd23ee9555960a0ede80f493a8d23419dfa5cc4fb5e817940637fc798f07e85dbbd6dcb71d0b031c1707d79ea01","ssdeep":"768:t1Xu9Qem5pQ1vgQxzu856c8Lky/N9X39YHZedwLoIwIwvsx6TL37:3Xu6V7Q1oQ91wZkIN9W5ed+wIwvsxor","tlshash":"6a23d09a4769c943c91495f5e2d0035206a6e21a27bb3f3798d0d1f2f8df7ba6d80828","first_seen":"2023-11-18T00:28:44Z","last_seen":"2025-01-26T10:53:00.262622Z","times_seen":34,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.me/L1ptoncasino/2?embed=1\u0026mode=tme","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme","date":"2023-11-28T07:38:27.575Z","timestamp":1701157107575,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.t.me","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 06 Oct 2023 19:50:31 GMT","end":"Wed, 06 Nov 2024 19:50:31 GMT"},"fingerprint":{"sha1":"D7:CC:2A:92:7B:DC:AE:6A:D7:92:51:20:49:AD:3B:AC:F9:27:F8:16","sha256":"99:4B:E6:3A:1C:4B:21:28:BE:BD:E2:E4:93:BD:44:3C:46:50:AB:9D:06:92:EA:73:37:58:4A:44:32:AE:6D:9F"}}},"request":{"raw":"POST /L1ptoncasino/2?embed=1\u0026mode=tme HTTP/1.1\r\nHost: t.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 5\r\nOrigin: https://t.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme\r\nCookie: stel_ssid=d0724a98e05423c4d8_3959180268430181307; stel_on=1; stel_dt=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 24\r\npragma: no-cache\r\ncache-control: no-store\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=35768000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-05-07T17:57:18.751156Z","times_seen":382114,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.me/v/?views=eyJjIjotMTU2MDc3NDQ1NCwicCI6MiwidCI6MTcwMTE1NzEwMiwiaCI6ImQzMDI5OWIxNzc5NTE3ZDVkNCJ9","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme","date":"2023-11-28T07:38:27.589Z","timestamp":1701157107589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.t.me","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 06 Oct 2023 19:50:31 GMT","end":"Wed, 06 Nov 2024 19:50:31 GMT"},"fingerprint":{"sha1":"D7:CC:2A:92:7B:DC:AE:6A:D7:92:51:20:49:AD:3B:AC:F9:27:F8:16","sha256":"99:4B:E6:3A:1C:4B:21:28:BE:BD:E2:E4:93:BD:44:3C:46:50:AB:9D:06:92:EA:73:37:58:4A:44:32:AE:6D:9F"}}},"request":{"raw":"GET /v/?views=eyJjIjotMTU2MDc3NDQ1NCwicCI6MiwidCI6MTcwMTE1NzEwMiwiaCI6ImQzMDI5OWIxNzc5NTE3ZDVkNCJ9 HTTP/1.1\r\nHost: t.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme\r\nCookie: stel_ssid=d0724a98e05423c4d8_3959180268430181307; stel_on=1; stel_dt=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 24\r\npragma: no-cache\r\ncache-control: no-store\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=35768000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-05-07T17:57:18.751156Z","times_seen":382114,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.me/L1ptoncasino/2?embed=1\u0026mode=tme","fqdn":"t.me","domain":"t.me","tld":"me"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme","date":"2023-11-28T07:38:27.575Z","timestamp":1701157107575,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.t.me","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 06 Oct 2023 19:50:31 GMT","end":"Wed, 06 Nov 2024 19:50:31 GMT"},"fingerprint":{"sha1":"D7:CC:2A:92:7B:DC:AE:6A:D7:92:51:20:49:AD:3B:AC:F9:27:F8:16","sha256":"99:4B:E6:3A:1C:4B:21:28:BE:BD:E2:E4:93:BD:44:3C:46:50:AB:9D:06:92:EA:73:37:58:4A:44:32:AE:6D:9F"}}},"request":{"raw":"GET /L1ptoncasino/2?embed=1\u0026mode=tme HTTP/1.1\r\nHost: t.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:34 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 4314\r\nset-cookie: stel_ssid=3967de180cc476057c_12631713570819759605; expires=Wed, 29 Nov 2023 07:38:34 GMT; path=/; samesite=None; secure; HttpOnly\nstel_on=1; expires=Mon, 02 Dec 2024 00:12:00 GMT; path=/; samesite=None; secure; HttpOnly\r\npragma: no-cache\r\ncache-control: no-store\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=35768000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4314,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1918)","md5":"7327ac9a58de6cc3cfee3bb71437d6d6","sha1":"0d6f88ab13a822c8d1cf22db74375e2f5e1fffed","sha256":"1d4b0dd4ed5c3d135223142bfeb5167a53f22a106cee2628fe60c2dc5a352717","sha512":"13937553a209684c3d6bf5e143095acdc94e194a48f3aab4c2809492331ef1852fff4366f569fa7aaa62ddeeff7e3062e0ab96914097d60971123d631aefdf03","ssdeep":"192:LukACv/5ueLIxV/9NcYnTMiqdWM0HvEzBu9I6jC5n/Y+jMFpkYjBa4p:LTn5hIxV/9NcYngiIWM0H8RMFpkYjBt","tlshash":"2512085343b6980f324345e7b65a7a1c7cd1d0dbf6299e4a79ae2171eb10da0743328e","first_seen":"2023-11-28T08:38:39Z","last_seen":"2023-11-28T08:38:39Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/emoji/40/F09F8E81.png","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme","date":"2023-11-28T07:38:26.348Z","timestamp":1701157106348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /img/emoji/40/F09F8E81.png HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 3258\r\nlast-modified: Fri, 01 Nov 2019 00:04:50 GMT\r\netag: \"5dbb76a2-cba\"\r\nexpires: Sat, 02 Dec 2023 07:38:22 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3258,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\\012- data","md5":"86ecca679356a2cfd5ac71c07b72b049","sha1":"c697292d33f7f3aabdc3d0f1713e21a77fe46ae5","sha256":"8da9efea9335e112246c50d9cf815ca2e7c2392d8f7d1ee3eb13d74cb1b900b3","sha512":"92aa513a08e3d322df469e521aed60e08334db4a517232d73d2ee8a5bb8ec4ba1581cb3ce7b99c633bed6334372fdac5e7400e68ccc94bb11815f52973552904","ssdeep":"","tlshash":"0a614b34e7e02665a235606162628abfb108c2c266d9b886f1c67dc3f90652cd7ddd8c","first_seen":"2023-05-17T04:14:44Z","last_seen":"2026-05-02T18:43:40.589631Z","times_seen":66,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-widget.js?22","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t.me/L1ptoncasino/2","date":"2023-11-28T07:38:24.916Z","timestamp":1701157104916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /js/telegram-widget.js?22 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Apr 2023 11:46:12 GMT\r\netag: W/\"642abc84-4ff5\"\r\nexpires: Sat, 02 Dec 2023 07:38:21 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20469,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (423)","md5":"1ff8b98c72268de58837846f2056c65a","sha1":"e77fcc14f1efd17d319c9f82627e5789333b9dbe","sha256":"0f6cdd09b3bbebf50c4e1679aff6f021f5e183a4ba2dea3a0801394599ff6afd","sha512":"1a680a7e87f16520da934f4034cdc601ebef9c306c7f5e3ea165588f044142cadcf5eb06cefedc8ea7768ff63830586a2776351c7b9429f1e33b639adca5f1ed","ssdeep":"384:+vLsc8o/o9o7IFdWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SU0CF3gLcHPb","tlshash":"2492819e1af72224a567713a4b5fa1093232e163700ddc503e6c5b90bf90a6767b0fdd","first_seen":"2023-04-05T01:44:44Z","last_seen":"2026-05-07T14:17:34.066244Z","times_seen":2622,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":144,"dns":0,"connect":29,"send":0,"wait":55,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/css/bootstrap.min.css?3","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://t.me/L1ptoncasino/2","date":"2023-11-28T07:38:24.913Z","timestamp":1701157104913,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /css/bootstrap.min.css?3 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 10 Nov 2017 17:54:14 GMT\r\netag: W/\"5a05e7c6-a61b\"\r\nexpires: Sat, 02 Dec 2023 07:38:21 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42523,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (42164)","md5":"c2656e265ef58a9cc9f4b70b15da5fb9","sha1":"85c5ebdb89d4574d72688c2650d4b84b9b09770a","sha256":"f1d083ffaa644c708f11db29707aa57c19246e6d32643b03fee3f82c17b224b3","sha512":"6417aadebeef4ee35381bfc7034148d57fd061d84de9974d798468c6426c24a6bd1c9913cf517accf3e349fa06cbdd546d2883ea8391c595285fe0c6127e26e8","ssdeep":"384:6RvBBVkrJxvcwYBUQ7X85AUfvDUNeFUBOgBmjeYP4PSvSdlb1bGjpXJNNRyIrOM:2k0p38OBmjeYP4xb1bG/bRyIH","tlshash":"6313c811f36031aa2167c61c65d4aad63f256120da8e0fbbf93376e88b8d6c91373f05","first_seen":"2023-04-07T00:00:47Z","last_seen":"2026-05-07T18:07:09.748053Z","times_seen":67584,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":146,"dns":9,"connect":23,"send":0,"wait":55,"receive":0,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/tgwallpaper.min.js?3","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t.me/L1ptoncasino/2","date":"2023-11-28T07:38:24.917Z","timestamp":1701157104917,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /js/tgwallpaper.min.js?3 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 03 Mar 2022 19:57:25 GMT\r\netag: W/\"62211da5-ba3\"\r\nexpires: Sat, 02 Dec 2023 07:38:22 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2979,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2998), with no line terminators","md5":"f03422dc797fd26a3834b1ec041128ed","sha1":"a6e88f4fe48b749c2b7360e8e004f64b6cfffb1a","sha256":"046ec6b7909d0ca5cc6ef271a1b57b2f2be0bd88e3495fd8c496f1524e8ffaac","sha512":"2f69e16fc15721ac83ba4ce928b971c280b3fdd137709adccf8ce309ed4c95a894d8514bad5647bdb541f0f1e43b03c29c7a171309a137815157d8d0a7319dcc","ssdeep":"","tlshash":"2151631a2790624df7251a927d7f036651b0a931e83790600a2ef4cbbcfced112e9e5e","first_seen":"2023-04-05T13:41:41Z","last_seen":"2025-04-06T21:57:59.142551Z","times_seen":46726,"resource_available":false,"data":null}},"time_used":2183,"timings":{"blocked":1064,"dns":0,"connect":28,"send":0,"wait":48,"receive":0,"ssl":1034},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/css/widget-frame.css?66","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme","date":"2023-11-28T07:38:26.197Z","timestamp":1701157106197,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /css/widget-frame.css?66 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 01 Apr 2023 17:42:21 GMT\r\netag: W/\"64286cfd-1456a\"\r\nexpires: Sat, 02 Dec 2023 07:38:22 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83306,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1653)","md5":"f80deb4a4fc00fa54cf4a1617ffaad1e","sha1":"52f5528aa59e0ad22c5103318a86a4c421d45b34","sha256":"d61214fdf1c1eee41b83cb56d52b82db20a47bfeab5248bb6fda7a4f0744eedf","sha512":"e1ed0e72a003538d1eea45b4421d02f31002d7fa04221eb35611020f1861832510d6253c6b96257d2c329d5a7e4859930af45c5c00624113be5b1b0cc118362d","ssdeep":"768:H2MwWGYLMcFu9/+riW3gq03Pbes07Wlj/Szl05JfFDMSnWWek7ZaWhzeFVuSTWY3:XMcG3PMqj/S505JflMSnAk7Zu/r","tlshash":"8583c5df5a71ad08782bc15b78c176182b3c9b87d505ee2a9ed934188f80ed5b83374e","first_seen":"2023-04-07T09:51:06Z","last_seen":"2024-08-21T09:43:41.892097Z","times_seen":239,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/tgme/pattern.svg?1","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/L1ptoncasino/2","date":"2023-11-28T07:38:26.049Z","timestamp":1701157106049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /img/tgme/pattern.svg?1 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegram.org/css/telegram.css?236\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 05 Jan 2023 17:52:04 GMT\r\netag: W/\"63b70e44-3891a\"\r\nexpires: Sat, 02 Dec 2023 07:38:22 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":231706,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- XML 1.0 document text\\012- XML document text\\012- HTML document text\\012- exported SGML document, ASCII text","md5":"d0c22c6a97023d85ba6e644a41c44a5d","sha1":"4284efb616c182da4450c123174ce0e81a322845","sha256":"118add53487c02aaf5b5ab9f69380fa06717deb10492e14aaa487e3c62806ad4","sha512":"da96462f4f999bb65509d32e4d5d2e1fd74555ce78d43e5f80fc350155bce59250337cd1796b17d2132f39429b5e3fd95d05101ee9f9b29bce2bb7b44b6e4eb8","ssdeep":"1536:XVU9J794HJ4E7mwNUiRPt5jmU7LxmMS2S1J7g8tEqcqMWKB5v:Xew7ePc","tlshash":"0a34c1834304f7fbada582589b3814e971c29debd430e1d475bb2d52da0ccd8598cbea","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T18:07:09.753898Z","times_seen":63720,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/website_icon.svg?4","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/L1ptoncasino/2","date":"2023-11-28T07:38:26.156Z","timestamp":1701157106156,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /img/website_icon.svg?4 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 20 Jul 2020 20:41:37 GMT\r\netag: W/\"5f160181-768\"\r\nexpires: Sat, 02 Dec 2023 07:38:22 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1896,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- XML document, ASCII text, with very long lines (1968), with no line terminators","md5":"5caca7ae1cffb3da0b06150a15020005","sha1":"04cfb934f238d33209406393a3fbf78454815739","sha256":"1ea747a06fbc240c2594a8c523cb248bbda4784f0fcad9d0f06334f1a378604f","sha512":"01f2f0bf09c9ba032a732b01706f50afc22d823abf3086d5377be20ebdf13cb42ebdd2e813849ccc598115b42fc03e2774439b2266272e1ef1d2f8cd000c7d37","ssdeep":"","tlshash":"3941a69e237554f9fa01c3ba8c30884f696674692b8980d0b0cd56fe7b180f1c7cd881","first_seen":"2023-05-02T07:47:09Z","last_seen":"2025-04-06T21:57:59.139859Z","times_seen":47669,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oauth.tg.dev/js/telegram-widget.js?22","fqdn":"oauth.tg.dev","domain":"tg.dev","tld":"dev"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme","date":"2023-11-28T07:38:26.203Z","timestamp":1701157106203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tg.dev","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 06 Apr 2023 11:57:47 GMT","end":"Tue, 07 May 2024 11:57:47 GMT"},"fingerprint":{"sha1":"1D:F7:54:6D:98:FD:29:3E:1C:E7:C4:22:56:BE:42:4A:53:4D:7E:C4","sha256":"9D:5A:92:B2:9E:1A:74:9D:51:8A:CC:BC:44:E9:35:99:E7:9E:3B:C2:32:63:5F:ED:D0:F6:9E:49:54:A4:72:47"}}},"request":{"raw":"GET /js/telegram-widget.js?22 HTTP/1.1\r\nHost: oauth.tg.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 03 Apr 2023 11:46:12 GMT\r\netag: W/\"642abc84-4ff5\"\r\nexpires: Sat, 02 Dec 2023 07:38:23 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20469,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (423)","md5":"1ff8b98c72268de58837846f2056c65a","sha1":"e77fcc14f1efd17d319c9f82627e5789333b9dbe","sha256":"0f6cdd09b3bbebf50c4e1679aff6f021f5e183a4ba2dea3a0801394599ff6afd","sha512":"1a680a7e87f16520da934f4034cdc601ebef9c306c7f5e3ea165588f044142cadcf5eb06cefedc8ea7768ff63830586a2776351c7b9429f1e33b639adca5f1ed","ssdeep":"384:+vLsc8o/o9o7IFdWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SU0CF3gLcHPb","tlshash":"2492819e1af72224a567713a4b5fa1093232e163700ddc503e6c5b90bf90a6767b0fdd","first_seen":"2023-04-05T01:44:44Z","last_seen":"2026-05-07T14:17:34.066244Z","times_seen":2622,"resource_available":true,"data":null}},"time_used":2177,"timings":{"blocked":1075,"dns":17,"connect":28,"send":0,"wait":23,"receive":0,"ssl":1031},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wyone.co.in/","fqdn":"wyone.co.in","domain":"wyone.co.in","tld":"co.in"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-11-28T07:38:23.441Z","timestamp":1701157103441,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wyone.co.in","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Oct 2023 10:01:27 GMT","end":"Sat, 27 Jan 2024 10:01:26 GMT"},"fingerprint":{"sha1":"E1:53:B3:42:35:C1:63:FB:51:49:0A:09:0D:BC:43:08:B3:20:33:57","sha256":"2A:23:26:2F:57:ED:4B:2B:42:A1:B2:58:B3:24:32:12:93:32:48:D5:1C:4D:6F:F1:F5:EF:3F:94:C7:B6:1F:96"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wyone.co.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 28 Nov 2023 07:38:19 GMT\r\nlocation: https://t.me/L1ptoncasino/2\r\ncache-control: max-age=3600\r\nexpires: Tue, 28 Nov 2023 08:38:19 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=zfAxbizLYnl6YJvIbXTj7wsbJ8gMhVomT%2FqY7K3sikWs6%2FFNainyGhd8tkHY%2FYcNRGXAb8kf9JR6n7NSt22M8IBN373YGEJ1uVDOX%2FKozvNuFi8FgmbqUFNa6XaZOw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 82d0f3606ffc56c1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":15146,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T17:57:28.492271Z","times_seen":14799076,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":20,"dns":0,"connect":1,"send":0,"wait":3,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/css/telegram.css?236","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://t.me/L1ptoncasino/2","date":"2023-11-28T07:38:24.914Z","timestamp":1701157104914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /css/telegram.css?236 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 20 Mar 2023 10:58:55 GMT\r\netag: W/\"64183c6f-1c0b3\"\r\nexpires: Sat, 02 Dec 2023 07:38:22 GMT\r\ncache-control: max-age=345600\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":114867,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1267)","md5":"0d209d756face073dd14a437f07e58b2","sha1":"20cb9119fdd02921a6bd0b1500f78a0b76a7a5c0","sha256":"acd326a9263ee8c4cbc757fed46333732a0e3f8f48d398cbd4f8e36a09fdaf76","sha512":"43ff3f3fcfb37178ac4ac365d0246cbff649b57c1f83f1072c2280c0909cdb054dbede85f1a3aed865536b15eb7a9eaf77a25eb90369d0ce83660ddeb32aaeae","ssdeep":"1536:xylcfDxYzbJ3iw93BC2cXdm791WoDYz5hw4uJuhwNpfewltog69FjxWDpfoV685u:xylc7xYzwwyVXkC0Yz6KL5u","tlshash":"d4b382db9ab99608746b80687ea35b42337d8003a54ece7dbbb1346cefc56d08173749","first_seen":"2023-04-05T13:41:41Z","last_seen":"2026-01-01T20:02:52.892627Z","times_seen":2929,"resource_available":false,"data":null}},"time_used":2198,"timings":{"blocked":1067,"dns":10,"connect":30,"send":0,"wait":48,"receive":0,"ssl":1039},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/img/emoji/40/F09F92B0.png","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t.me/L1ptoncasino/2?embed=1\u0026mode=tme","date":"2023-11-28T07:38:26.321Z","timestamp":1701157106321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 11 Aug 2023 16:00:43 GMT","end":"Wed, 11 Sep 2024 16:00:43 GMT"},"fingerprint":{"sha1":"AB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30","sha256":"D7:2D:40:3C:DF:83:75:CF:52:F8:28:D1:DD:CE:2D:2E:99:05:B1:16:EF:E7:F5:04:D3:3D:DB:98:40:93:3D:E9"}}},"request":{"raw":"GET /img/emoji/40/F09F92B0.png HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Tue, 28 Nov 2023 07:38:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 2731\r\nlast-modified: Fri, 01 Nov 2019 00:04:50 GMT\r\netag: \"5dbb76a2-aab\"\r\nexpires: Sat, 02 Dec 2023 07:38:22 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2731,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\\012- data","md5":"9c2cab881758931a5acf295f33dfb871","sha1":"6e8de63f761d4824164543b00bd20236be34cc86","sha256":"5ff2b27e2e05d08bcf76b75af105ae51c9eae81df1b3ca8fb80451b475ef9994","sha512":"b4611f4b21239a1da275ea68d4f68b76579550f715dedfa44cd293f8bd3a32763e91389e49b1730459838e0912154b6e169b9bcbaa7385290fd1e3cd3aefa56a","ssdeep":"","tlshash":"d8516e83b232d2edcc00d3cd150440bef7cd25526bc9493d554948abbe451df54be197","first_seen":"2023-05-02T18:09:58Z","last_seen":"2026-03-23T09:05:52.29158Z","times_seen":71,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}