{"report_id":"913a2142-044d-4d82-a88e-1036e42bf870","version":6,"status":"done","tags":[],"date":"2025-02-27T04:05:55Z","url":{"schema":"http","addr":"telegtrbl.lol","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"104.21.47.160","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"telegtrbl.lol/k/","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"title":"Telegram"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-05-08T04:05:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"telegtrbl.lol","ip":{"addr":"172.67.149.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-22","domain_rank":0,"first_seen":"2025-02-27T04:05:55.831961Z","last_seen":"2025-02-27T04:05:55.831961Z","alert_count":33,"request_count":33,"received_data":1607901,"sent_data":26100,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tong1.bu-e.top","ip":{"addr":"104.21.36.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-10-16","domain_rank":0,"first_seen":"2025-01-12T22:50:35.088361Z","last_seen":"2025-02-27T00:48:48.973269Z","alert_count":0,"request_count":2,"received_data":5144,"sent_data":945,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-02-27T04:05:27Z","timestamp":1740629127,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.21","port":47956,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-02-27T04:05:27.425418+0000\",\"flow_id\":1303333130834614,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":47956,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"event-gratis-codashop.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":480,\"bytes_toclient\":116,\"start\":\"2025-02-27T04:04:25.955062+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-02-27T04:05:40Z","timestamp":1740629140,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.21","port":47862,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2025-02-27T04:05:40.155734+0000\",\"flow_id\":1874035499983340,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":47862,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"event-gratis-codashop.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":480,\"bytes_toclient\":116,\"start\":\"2025-02-27T04:04:21.909804+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"telegtrbl.lol/k/main.d54bfa037348b154a941.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a04bc08436674f0eba06d5c190dc6fe5","sha1":"3d0a8dbececd918da43706976766e246262d254d","sha256":"4c70083f389a2fafc6a5f3c35179243623b4416cab07a1c6ce08d3f7c1ddb2ae","sha512":"d9e2d1e67443393e0ad97ee1a6073865cd7fda9c47e2a8af36b18da07d4e3e451f69bfa55bb43ccc9aec31cf4d8ce8d78400b3a88e6db91b8b2c6c0b9815bf07","ssdeep":"6144:MHjJYD09b9rmTRCRFH8iQ8RDmMz0cuC1WbBBcrQqzj:ajJYD09b9rmIPci/RdzL1W9BcrQqzj","tlshash":"e4547dc5b281b5e962eb15e6987b4608f73459043804c4a0f1fcfda93e72dcb52a3f69","size":296503,"data":"","first_seen":"2024-12-10T16:27:28.220449Z","last_seen":"2025-09-23T08:33:30.825525Z","times_seen":8416,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/redirect.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"17773b57b87a678c98e26a7cac72df6c","sha1":"7422857aa75ee81cabcec2eed6c4a6168f363ee1","sha256":"375141f2d3f04c733276dbff5d9208ff36b2db6a64abcee723179ac24797974f","sha512":"28d9e1c2af08154e653e2291db46f4110edbf9f5591192f8d695c8852f9c3c755d69dfb5a032a45f51e0a3fc9417f16c20d0772b1225ca9b85e5531e12fa8bfc","ssdeep":"","tlshash":"7be07d9b122903141ba012f3bec6b4706533c3fa304d51014d684221f4be78f9b6794f","size":325,"data":"","first_seen":"2023-07-27T09:32:34Z","last_seen":"2026-04-05T02:20:45.424484Z","times_seen":11410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/8673.1b6dd8d303b0535cc1f8.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea8d5208dada45e8d0844877a7c93db6","sha1":"45d98fbe3dae09a988cccd836d39016c5100f313","sha256":"25f447387cefb643c04e0aa816e21edf562ebe9b7e3f7b808bdb179154fc17b8","sha512":"e95f47a6e80cedfffd956858247f718db6dddf6a9802ca324f384c0e813895a949090cba5c2cad59e6a14d14c736d93954596385c99103de67844a4cd8f99d20","ssdeep":"192:HnCUz1vNz+6YWQ5PMCUNLTF63vy3fEBzXNqYyx7as/m49YA/UovoDc+Eub/:HnN1vNzHYWTavRXoYyxeqm4aAzAD/Eu7","tlshash":"5d22f885b222b4be9296d0d9ea254b03aa3591143c19a1bcf77c79f72c81d4730bcf36","size":10696,"data":"","first_seen":"2024-12-10T16:27:28.222065Z","last_seen":"2026-04-04T23:52:43.632681Z","times_seen":12911,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tong1.bu-e.top/script.js","fqdn":"tong1.bu-e.top","domain":"bu-e.top","tld":"top"},"ip":{"addr":"104.21.36.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24588efcad1b1bc512f27961cff7085","sha1":"63f9c11347cf47e1f217a774f4aded6e38ab81a3","sha256":"56c995899aaa0d0a9f7ae61e646dd5210d14b361599900e76c81ab89c6b2005e","sha512":"defee917d42c95f3a10f378fba421fe197e65d133d1b0aeb26c7ba371da1deb1028f148d32f0cf68a3d246b5b5a7cf9dcd4e257c81fd205b317f60462cbfaaf4","ssdeep":"","tlshash":"2f511af5b299f0b17e5c6cd5c2be9830e12c5772380b4070babe9c8dae1c51551b1faa","size":2643,"data":"","first_seen":"2024-12-20T14:28:38.383967Z","last_seen":"2026-03-26T08:50:25.240194Z","times_seen":1538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/compatTest.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da7800ea928a021f2539ab41e6f2323e","sha1":"0141da1dc85ca8f34212f3dde2fac9bf61f5adb7","sha256":"15c24ec2b4cb94f24e66750f09e7071e5659e20a5ed926f69f565e20a81027cf","sha512":"228ca1c1f1ff8de139ebcfa7b084bc40d467a56ddccd103cf02a3fa26ba8c1b4d1961904511198e2fb6797837414bb3c09fc9f0902c3874f2467f279d526f0a9","ssdeep":"","tlshash":"2e51140a1970727061686f67bfa6b2433a295235065cf138a6108b3b3fb785bc15fdf9","size":2544,"data":"","first_seen":"2024-06-30T22:36:50Z","last_seen":"2026-04-04T23:52:43.635509Z","times_seen":13998,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"telegtrbl.lol/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-27T04:05:26.041626599Z","timestamp":1740629126041,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 302 Found\r\ndate: Thu, 27 Feb 2025 04:05:26 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Zh%2B6t%2B0nJFn6u4wVJ7Alh3hphkzrhoHDk875Y0T4AF%2FNxerVbi9Zg8geAEGwtkFduYTo7Ve%2BzJzL8VdgDkRZoxpAvnQHIdzXjApZei8qWw9aQv2mP51fpAoKS%2FBKGrpa\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 91854be5bc8a5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2941\u0026min_rtt=1118\u0026rtt_var=2019\u0026sent=73\u0026recv=23\u0026lost=0\u0026retrans=0\u0026sent_bytes=62509\u0026recv_bytes=3607\u0026delivery_rate=8724463\u0026cwnd=38400\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=857\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T08:47:05.766455Z","times_seen":13367613,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/cdn-cgi/challenge-platform/h/b/jsd/r/0.3410210982028969:1740625832:ye1Bo1kkXkpfoVGRS6u64i5WAJhY_o0PLxOsgkDOqaw/91854bddd8745691","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-27T04:05:26.227208734Z","timestamp":1740629126227,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.3410210982028969:1740625832:ye1Bo1kkXkpfoVGRS6u64i5WAJhY_o0PLxOsgkDOqaw/91854bddd8745691 HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12072\r\nOrigin: https://telegtrbl.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:26 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nset-cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.telegtrbl.lol; Priority=High; HttpOnly; Secure; SameSite=None\ncf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38; Path=/; Expires=Fri, 27-Feb-26 04:05:26 GMT; Domain=.telegtrbl.lol; Priority=High; HttpOnly; Secure; SameSite=None; Partitioned\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FdL6EOvaDKUXu%2FCzUibyGtR%2FxhIxi%2BL9gBxmsKdusluDy1D5P23Pyy2TfkepI01bAO488bGMJ1AnXa5COTVq%2FE3ZpuU54u9VPFKbr4VV1uJmCN4aVEjG8d3DRev27CDe\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854be6dcc95689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2742\u0026min_rtt=1118\u0026rtt_var=1912\u0026sent=80\u0026recv=35\u0026lost=0\u0026retrans=0\u0026sent_bytes=67974\u0026recv_bytes=16744\u0026delivery_rate=54083\u0026cwnd=38400\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=1043\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T08:47:05.766455Z","times_seen":13367613,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/files/img/apple-touch-icon.png","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-27T04:05:26.63129136Z","timestamp":1740629126631,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /files/img/apple-touch-icon.png HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 5644\r\nlast-modified: Sat, 08 Feb 2025 22:37:41 GMT\r\netag: \"67a7dcb5-160c\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6txJ%2BcD6lgl1qJ6Oyw%2B%2FBQ4hRxY3yYrHtyIQnRTWAl5OJesAYBQ0qP8OC6rF%2Bw6l7SPRmxAW7xUufwl9e2yQu%2FFWpmz50dvrb3w2EQOcHYqydHQVlnS%2BTkY3lfhSHd8C\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 91854be6fcda5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3038\u0026min_rtt=1118\u0026rtt_var=2524\u0026sent=93\u0026recv=41\u0026lost=0\u0026retrans=0\u0026sent_bytes=79555\u0026recv_bytes=18635\u0026delivery_rate=66417\u0026cwnd=38400\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=1445\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5644,"size_decoded":5644,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"295ccdb03006b8dfef45090dafbd46ac","sha1":"491ab660270e47cbac6a5731c51cca71c1c1b2b1","sha256":"a51d667d4262047c23e3a2a8aac3b46dc8a58c686cc013f2354011c07bf22cf3","sha512":"90bf3871af6d20372e1b7daa177afccaa16d30970873c2a1363d05fc49eca24b18e406835da051d79887e0e223aae345fd797cfa479f324f776e28b461b17bcd","ssdeep":"96:ZKgGepqI/QddfO0T+kST5610/DXhkyFBKNpu7UhDjuTu+uCCar+0xWl/rB61LVWR:yesBf+DNPVFANc7UhDku5G+0xWl/t6OR","tlshash":"28c19eb8f6ed2e5bc5f28693eb472665b2972a208534c06053f1ea1bd7b2121b4c6342","first_seen":"2023-05-02T07:47:09Z","last_seen":"2026-04-04T22:28:42.798278Z","times_seen":67672,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/files/img/website_icon.svg","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-27T04:05:26.732664791Z","timestamp":1740629126732,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /files/img/website_icon.svg HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 08 Feb 2025 22:37:41 GMT\r\netag: W/\"67a7dcb5-768\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ylMQaxUKB%2F95d7vqoVa9ML9D7wAnRctdAKSPji4tYhCpNLSFyyaP2pytyMAbWq7N5gnSu4U5eScagCXrlVstXZDFYl4hPy%2FaF8WPMYt%2BP3sVVXUS9V5nVzkdBrcHnyEM\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 91854be6fcdb5689-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2828\u0026min_rtt=1118\u0026rtt_var=2312\u0026sent=99\u0026recv=42\u0026lost=0\u0026retrans=0\u0026sent_bytes=86033\u0026recv_bytes=18681\u0026delivery_rate=2953774\u0026cwnd=38400\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=1460\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7936,"size_decoded":1896,"mime_type":"text/xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"02f7553e1ac3129cd1c4d0442b5a0f81","sha1":"0dd8634450681fe1a2d0c1e5b02d6d0954e2772d","sha256":"0019255c610cb0843c524d7995905fa5201651fcc393846bee8414f0610097f5","sha512":"ac141a5648a3a22ceb295de8ecc6823f53d2a453316cd591dde888715344a60694316e1b85a5ceec72af62e34cc3d01768b020e5dfd5e0cb9916ec975ba4318e","ssdeep":"","tlshash":"1d41959d23ba14faf245c768d82560076a6704b7664980e4f08d6bfdaf180f3cb9d8d5","first_seen":"2023-05-31T00:52:27Z","last_seen":"2026-04-04T23:45:27.474905Z","times_seen":19398,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js?","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-27T04:05:31.854810956Z","timestamp":1740629131854,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js? HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:26 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5gseEqDa%2BTP7vXIHofdcW8dTV5tbIZRP2ftpBBQ7RFCGFyPzphQhW%2Fv%2F%2BjpY7bZn7Ket7zbDhzzUMTbfgUDeFZZXiFdizLt43092f7GA8W5MEqzikfN54Ve3EyYb5mVy\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 91854be5cc8e5689-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2941\u0026min_rtt=1118\u0026rtt_var=2019\u0026sent=75\u0026recv=24\u0026lost=0\u0026retrans=0\u0026sent_bytes=63258\u0026recv_bytes=3872\u0026delivery_rate=8724463\u0026cwnd=38400\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=870\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15912,"size_decoded":8443,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8443), with no line terminators","md5":"7a05e3c31f9aa927ede934b6e9b84a0c","sha1":"134ab26ddfd22606aee23126d02d46243311937f","sha256":"dbb503c9cd70bacc7c1a0e222539c9e8fdbf53058b1056c362d4d3790518fb6a","sha512":"2a0617b92f884c9294923b48485183dc68b62735b029764d0a3af6535f362c1371ef227ae1879b6319459a9fa445a9c2b04c38018dcb776741540c7d5bf7a9ea","ssdeep":"192:cmElMV0hgxL8CebnojycnQldPlPZ9xpHC+xrW:NwaDxL8Cwo2kg3xpHC+xy","tlshash":"3302f8d27b8f7c22023264fe527ba643304ebe1678694c675111c8f4b970b5894efe9a","first_seen":"2025-02-27T04:05:57.501477Z","last_seen":"2025-02-27T04:14:27.452407Z","times_seen":2,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/js/files/8940838e7dddc787d8.html","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-27T04:05:32.061303044Z","timestamp":1740629132061,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /js/files/8940838e7dddc787d8.html HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/js/tgsticker-worker.js\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:28 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 08 Feb 2025 22:37:41 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CP0H%2B%2Bk5FSnF%2BwHEgYd2f7vCKd0pYJu0PsSiZNSTwSC%2FrYQZDPPxePzVzLIemzA7pclfQXEfH%2F0TrayWkxAztXVVBQW2XBfHSswLJ6803PbKKOSu0nzQ6KzhXZosgqJk\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854bf4b9355689-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1913\u0026min_rtt=842\u0026rtt_var=1188\u0026sent=487\u0026recv=98\u0026lost=0\u0026retrans=0\u0026sent_bytes=497131\u0026recv_bytes=31810\u0026delivery_rate=7313820\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=3655\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48975,"size_decoded":10959,"mime_type":"application/x-gzip","magic":"gzip compressed data, max compression, from Unix","md5":"fcf0262beb96c58fd7aeb5c0bb8fc4af","sha1":"22c51ed3eb77fc79ac3fe8131f8cb08c9afd532e","sha256":"e81ea8894a34c2673dc7e7afa5055eded2622f15dab8f452ea79c240c6969f3f","sha512":"11422afa3f696c703ad2b0cbdf00f2b5c099fb40be43c82ee17686383ab5ad194ac6efcdf4dbc65bcfc3b7c3e62ad6811a6834386b7d01d9e89791c051ded060","ssdeep":"192:Sq3PR72ctqmVQvWnigEmVxdobM5cFOvCZbZ9gAJxhJuKwi6Sy18YapNjagcvb1CG:Sq3PR7jtmAHB5eOvubZ9bNDgvapdBcpr","tlshash":"bb32af28841141f086ac56f00bbba5126df7c087a9ae2067b9dd11edfc69f8fa4583c3","first_seen":"2023-05-15T10:53:56Z","last_seen":"2026-03-23T09:28:29.544356Z","times_seen":440,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/js/tgsticker-worker.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-27T04:05:32.352635212Z","timestamp":1740629132352,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /js/tgsticker-worker.js HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 08 Feb 2025 22:37:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a7dcb5-1731\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1oiT98vyHfu9686qSUwiHVDNor729Y2oOezcoy4gQDzFEHWW3ecuxvDgGgkLCKWpx8n76L0WqD3zFlMkoF63SYi%2BzXPSzVMjztoR5yEorOIF2RYveJckBGa5FEGJiP0Y\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854be59c825689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3520\u0026min_rtt=1118\u0026rtt_var=2991\u0026sent=82\u0026recv=38\u0026lost=0\u0026retrans=0\u0026sent_bytes=69118\u0026recv_bytes=17967\u0026delivery_rate=35945\u0026cwnd=38400\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=1234\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27143,"size_decoded":27143,"mime_type":"application/x-gzip","magic":"gzip compressed data, from Unix","md5":"a4ae47c031c613d6f5e9a1107d7dd97f","sha1":"6dd67b3182e622d8091d3ab5b2f72f65c362eef1","sha256":"6d400cb5953e739095351a21f91e1cbc5c53009117bc81c2ca4b80ac7ffaa742","sha512":"96bae0b7b96f16a8add07d88f4dd59e68f9e9e1ac7a10767ea769d979aeda761483884feba5c68556269184935b17a4ed181c092214c793d0adbcf6d963be797","ssdeep":"768:8McwRpLQZC/OsZ0sSVv6fVua13KwIpi0lc:vjL+Cv0v6dn13Kw6i7","tlshash":"77c2f19f24505b15b3cee932cd1356db8a5e60fb9cf3e470a294e6501185d38c4aceeb","first_seen":"2025-02-27T04:05:57.506057Z","last_seen":"2025-02-27T04:05:57.506057Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tong1.bu-e.top/api/send","fqdn":"tong1.bu-e.top","domain":"bu-e.top","tld":"top"},"ip":{"addr":"104.21.36.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://telegtrbl.lol/k/","date":"2025-02-27T04:05:32.162Z","timestamp":1740629132162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bu-e.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Feb 2025 19:10:41 GMT","end":"Mon, 12 May 2025 20:09:19 GMT"},"fingerprint":{"sha1":"2B:B5:8C:50:02:A3:26:B3:70:0A:E0:63:64:C5:ED:A0:DE:6F:44:2C","sha256":"9C:0C:78:8F:24:63:82:6A:F5:30:A4:32:CD:7F:4A:76:4C:C5:45:71:D7:D5:6F:CD:F4:99:0F:4D:3F:2D:3B:98"}}},"request":{"raw":"OPTIONS /api/send HTTP/1.1\r\nHost: tong1.bu-e.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://telegtrbl.lol/\r\nOrigin: https://telegtrbl.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 27 Feb 2025 04:05:32 GMT\r\ncontent-length: 0\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self' undefined\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UeT%2FK66cEgow07vfhVHsg%2BaJnK58SiS7IMclA%2FE8OXjgXjDzCrs36FtW1yuwgKyRr57bSmDOFblhR6PVuDW5Bwg%2BuST7E2d9q8Upr8R57IG2iMXBSBgt1qHaJRmiTh70lQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854c0c1a6f56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=4269\u0026min_rtt=4243\u0026rtt_var=1609\u0026sent=13\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=4140\u0026recv_bytes=1206\u0026delivery_rate=139963\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=77015517ccb0c8c2\u0026ts=572\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T08:47:05.766455Z","times_seen":13367613,"resource_available":true,"data":null}},"time_used":574,"timings":{"blocked":17,"dns":1,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/js/tgsticker-worker.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-27T04:05:35.580862076Z","timestamp":1740629135580,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /js/tgsticker-worker.js HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 08 Feb 2025 22:37:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a7dcb5-1731\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 2\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5sPs3w6M1Bdajht%2FnjoW1S7Zx1ugYWshnEKb0OMtbDhJtX3z7kyHOBhVoIQM3rjfVA4PkcEWeDMQH%2Bo2tz2ml%2FAGawlYcNlGmaMH%2Be08Y%2FzKRiDUOfo1YQ0psubWBnc4\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854bf378ae5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1230\u0026min_rtt=842\u0026rtt_var=456\u0026sent=273\u0026recv=68\u0026lost=0\u0026retrans=0\u0026sent_bytes=268202\u0026recv_bytes=22471\u0026delivery_rate=9407396\u0026cwnd=38400\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=3062\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39133,"size_decoded":39133,"mime_type":"application/x-gzip","magic":"gzip compressed data, from Unix","md5":"2542fd51a65ec2e6a37d721fc9c53316","sha1":"989d09088e47d5f151634c858371aeaa26212567","sha256":"b19f09a068616d045fbfddf9939e753ea2e308581588e543c7c8d8c5b3ef06b3","sha512":"500863bf8fd2035e791a407eecd8360927ef4117545eee9289530012bb8d38bf68243f42fcd1f2866f39bf10e77f0a1fe0cea64624df87e07f737f725ea85ee4","ssdeep":"768:8mOOjPZsfRSfZ7dsEMBf8E5mD+dKvzTXKRuPYM7uFcOXEfBkbuwb/EN1ww4yNx:BOOjRKctdiRtcD7+cYEf9wTEN3X","tlshash":"4603f13910444c3dd53674b82263d28d6e19f153cba5487f70498af8a72e352f9ef6a2","first_seen":"2025-02-27T04:05:57.507843Z","last_seen":"2025-02-27T04:05:57.507843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/js/files/7604effa1e02ddf7f9.html","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-27T04:05:36.592106224Z","timestamp":1740629136592,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /js/files/7604effa1e02ddf7f9.html HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/js/tgsticker-worker.js\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:28 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 08 Feb 2025 22:37:41 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uAusOgBfN%2Bqmiz68BTx8uXI0aj63gD6X%2B9Ezv8IigpAYS%2FBXPKfz7WF6MxvssbCGuzqJPtUj%2B7C8FP0QuD8la3GjX3s8BubQ%2BmOQ8%2BnYoiTW7KtVy9e7giYRo%2BdIXYYz\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854bf4a9315689-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1449\u0026min_rtt=842\u0026rtt_var=413\u0026sent=438\u0026recv=93\u0026lost=0\u0026retrans=0\u0026sent_bytes=441731\u0026recv_bytes=31581\u0026delivery_rate=54538\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=3628\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32947,"size_decoded":12708,"mime_type":"application/x-gzip","magic":"gzip compressed data, max compression, from Unix","md5":"22fc89b07d3463221776fe84924f0093","sha1":"ec315241af796928056aa2408759a5dd502a47ed","sha256":"e3327b49b4abb4c0919ac93668e7ad15bbc6fbd3741fadb82a7dcb6d70175f15","sha512":"f612e6621d5b5fc2ebce8e50a5c62050501d95444a3a70abfafb9c73fc5643b36124cd79a0041b54102ff2f1bd5556e62201230e9e0ae1368ba7c8d487f67c7a","ssdeep":"192:5enfPdeBlrt5LecDLT68iTVs8XoTq8lUcnhJCSTyFWBvFvIzp8TgR3y1wHYG:4Xkzrt5LeCLSVtz8xC9FWxc8TiZHd","tlshash":"cb42cf0c6a73c41ac41a9f6b02cb8879ef6cacd43f41e342021a067bd0ead191deda84","first_seen":"2023-05-15T10:52:59Z","last_seen":"2026-03-23T09:28:29.477657Z","times_seen":377,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegtrbl.lol/k/","date":"2025-02-27T04:05:35.075Z","timestamp":1740629135075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/2976.4e6e9b1254ce313f06c5.js HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 08 Feb 2025 22:37:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a7dcb4-3878\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 0\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=oBHViXaSGC%2By%2BuoVwMwHp%2BODqSbefErpEK6usZK3MVqD5A59Zt3ue3JI3ks8b9MFEsH9qUJo%2FhfGRsgpoRipLmAJ9WMJnN7hupBmSK1x7A1CD4onZBtO9%2B2I5jz31jxf\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854c1e2e8e5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1485\u0026min_rtt=842\u0026rtt_var=453\u0026sent=705\u0026recv=132\u0026lost=0\u0026retrans=0\u0026sent_bytes=729622\u0026recv_bytes=41502\u0026delivery_rate=36100\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=10119\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23271,"size_decoded":23271,"mime_type":"application/javascript","magic":"gzip compressed data, from Unix","md5":"acfd42e7a31ae3ca68d0b695cf3f0cf1","sha1":"ce5486c9f20e68ee48584c750b914055d8afb7f5","sha256":"ac992fa4ec54cbd29a1ba4127b92380fe58f031213b6d8d6735645a78bde83a7","sha512":"66663084efbd448d5513269653ed5b96c3d94ae8091b9b5afe462a82e22d41f3c6bb41113f92a546a98c5000238a9a2aa82afa5a71b6b38cc56d119caf4a4f70","ssdeep":"384:UDjz4PDLEs1sJaZQOeRb84ZHf3JLMR50AkI4ZW7AhVqEOaTSnyB05LzPJBqzeZpC:sjMPDLdjwKihMR50ASW7A6EOa2ncSZpC","tlshash":"5ca2d0ba8c652c48d485407e096e16d80bcfbbe6d125cc4e760eccdc648867af86f6cd","first_seen":"2025-02-27T02:10:12.722282Z","last_seen":"2025-02-27T04:05:57.51055Z","times_seen":2,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/redirect.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegtrbl.lol/k/","date":"2025-02-27T04:05:30.780Z","timestamp":1740629130780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/redirect.js HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 08 Feb 2025 22:37:41 GMT\r\netag: W/\"67a7dcb5-145\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mG54zucpppRN2fAUJ%2BZr1NOLnKi2aQp%2FEvT%2B0ziTvd17bGhg3r5fTkE8f4JNgA5XGAN7dtJgBkVuzczavl%2BsSUxvASe8vWoSl1O7rF0AJ1hPU9p2n0Ve1wdIj538co8P\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 91854c035e325689-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2084\u0026min_rtt=842\u0026rtt_var=1072\u0026sent=561\u0026recv=111\u0026lost=0\u0026retrans=0\u0026sent_bytes=572926\u0026recv_bytes=35057\u0026delivery_rate=8985\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=5979\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":325,"size_decoded":325,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (336), with no line terminators","md5":"0f4bee764cf7e7080cc0c1a836d6c85a","sha1":"7cdea3a612218fe6898aa117eb4598d7d0dce420","sha256":"9d8ec261dba46e501288de7aee04435dfe1d8728b0bf65a4a79c08e5c90a5b54","sha512":"6d2621246959465b95acf38458364474a0ceffd4adfee32a71ca0ef6a35f13ee6370b2171c7a993bf94583ceebfbce00ef9205e37ab5d95be2f4e0722fa5055e","ssdeep":"","tlshash":"3ce07d9b122903141ba012f3bec6b4706533c3fa304d51014d684221f4be78f9b6794f","first_seen":"2023-08-11T01:05:54Z","last_seen":"2025-04-06T02:37:28.011068Z","times_seen":2257,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/main.d54bfa037348b154a941.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegtrbl.lol/k/","date":"2025-02-27T04:05:30.782Z","timestamp":1740629130782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/main.d54bfa037348b154a941.js HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 08 Feb 2025 22:37:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a7dcb5-48637\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4vC%2B11fjhrvV7FO9a6fru1S8xHg3Ig3%2Fc2BMtdMtBcP00PnnX29j9lMeauYgKNN%2B%2FRYxHrBfVckD9RqpV3wHaCsn44QwNn8B6zIJ877%2F3kS08vQUz8tWMCdxWZllugdH\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854c035e345689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2084\u0026min_rtt=842\u0026rtt_var=1072\u0026sent=534\u0026recv=111\u0026lost=0\u0026retrans=0\u0026sent_bytes=540711\u0026recv_bytes=35057\u0026delivery_rate=8985\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=5978\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":296503,"size_decoded":296503,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T08:47:05.766455Z","times_seen":13367613,"resource_available":true,"data":null}},"time_used":750,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":363,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/7784.df07a876b22e3b2a83e9.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js","date":"2025-02-27T04:05:35.314Z","timestamp":1740629135314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/7784.df07a876b22e3b2a83e9.js HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 08 Feb 2025 22:37:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a7dcb4-53e5\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 0\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vyB4JQ25Yd2gKfHMNYobAkEF3VR9COM5pyMSTCzqB518ojkfgqbhH353cLkwOxk6Wd%2BaH2Jba5TSPRM3V%2FPjL7tp7XCEE8uWhXzCNVj%2B0Joo35dIA3yK7UAx9YsKgvwt\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854c1fbf0a5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1397\u0026min_rtt=842\u0026rtt_var=315\u0026sent=738\u0026recv=139\u0026lost=0\u0026retrans=0\u0026sent_bytes=761357\u0026recv_bytes=44007\u0026delivery_rate=25228\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=10523\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21477,"size_decoded":21477,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21340)","md5":"a0980d43cea486530c30f9f5e1c1b5e4","sha1":"deec93f70f8b813b479137075afa6a0a3a25b8bd","sha256":"4b5eeb1400e5118a1aff286d9a6cf893bd7c08fc8247c62116238ea587890e9e","sha512":"9ac9939efa609ace82b5aed5157468098f6e0a25906bdbed44a4ce99fc822004b7c0a6ead8d6de6b148f7b8438ef9aac944e0ec8b1fe0c4825ea9195d500af00","ssdeep":"384:1AdJR5l17Hc+yWId88Q+0VL3oQ0LmVIkTzxr1QQ02NBTQ2tp2TLRX8tRiWyI:1AdJR7dHt8cVL3oQ0LeIkf502NBTQUYW","tlshash":"f6a21bb766f915d652e848e808cb189951f4e0223d86293e5134edd220f2cdbf2fb97d","first_seen":"2024-12-12T09:50:13.265257Z","last_seen":"2026-04-04T23:52:43.634998Z","times_seen":12704,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":394,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/7784.df07a876b22e3b2a83e9.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js","date":"2025-02-27T04:05:35.324Z","timestamp":1740629135324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/7784.df07a876b22e3b2a83e9.js HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 08 Feb 2025 22:37:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a7dcb4-53e5\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 0\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=w2mAPMtsOOBn47MIirBvf3oPDKBfJZthzbH8XS5gdO4bst6T%2Bw1N0fiiXa5tvW%2BS2l4IB2UubwN21rmclM3uR8THk5Qe3ojOzj5JF82fdO5Tz%2FZfQwec2ahmmL8AlPAG\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854c1fcf165689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1375\u0026min_rtt=842\u0026rtt_var=240\u0026sent=755\u0026recv=142\u0026lost=0\u0026retrans=0\u0026sent_bytes=779632\u0026recv_bytes=44690\u0026delivery_rate=5448040\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=10541\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21477,"size_decoded":21477,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21340)","md5":"a0980d43cea486530c30f9f5e1c1b5e4","sha1":"deec93f70f8b813b479137075afa6a0a3a25b8bd","sha256":"4b5eeb1400e5118a1aff286d9a6cf893bd7c08fc8247c62116238ea587890e9e","sha512":"9ac9939efa609ace82b5aed5157468098f6e0a25906bdbed44a4ce99fc822004b7c0a6ead8d6de6b148f7b8438ef9aac944e0ec8b1fe0c4825ea9195d500af00","ssdeep":"384:1AdJR5l17Hc+yWId88Q+0VL3oQ0LmVIkTzxr1QQ02NBTQ2tp2TLRX8tRiWyI:1AdJR7dHt8cVL3oQ0LeIkf502NBTQUYW","tlshash":"f6a21bb766f915d652e848e808cb189951f4e0223d86293e5134edd220f2cdbf2fb97d","first_seen":"2024-12-12T09:50:13.265257Z","last_seen":"2026-04-04T23:52:43.634998Z","times_seen":12704,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/compatTest.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegtrbl.lol/k/","date":"2025-02-27T04:05:30.784Z","timestamp":1740629130784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/compatTest.js HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:31 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 08 Feb 2025 22:37:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a7dcb4-9f0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OsSjMakl7AwDSqSVhY5bWhMSzmZ%2BE8QFdrVu8JWdyi5CxAfEx8k0UIPz1TEa%2BiGnKLSZLDD%2B9TtvYyr0vQeqL%2BUyjV7dd8pjkytXJ2XGE1bbmVKlJtWxCqL8k7svSNhq\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854c035e385689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2184\u0026min_rtt=842\u0026rtt_var=1003\u0026sent=562\u0026recv=112\u0026lost=0\u0026retrans=0\u0026sent_bytes=573799\u0026recv_bytes=35103\u0026delivery_rate=84701\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=5989\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2544,"size_decoded":2544,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2610), with no line terminators","md5":"6cfbdd49583de4aef06544f30e1eafb9","sha1":"b852473e5433f95a06bf58c7e625876a14358422","sha256":"9f053b9be11ee313213aaf4d5269f4a011e068ed6eaf12a557634381fc42c9ec","sha512":"8c7c17587e7320916cbcca60b47c1f3e36a0593579e270d07597ebb90a67f378cc8fc1e23771f0c6c0703167431a049bb29ddc72716b26a6a41dca78734e4a6d","ssdeep":"","tlshash":"db51140a1970727061686f67bfa6b2433a295235065cf138a6108b3b3fb785bc15fdf9","first_seen":"2024-08-08T20:11:56Z","last_seen":"2025-04-06T02:37:28.011698Z","times_seen":2323,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/7784.df07a876b22e3b2a83e9.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js","date":"2025-02-27T04:05:35.320Z","timestamp":1740629135320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/7784.df07a876b22e3b2a83e9.js HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 08 Feb 2025 22:37:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a7dcb4-53e5\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 0\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ftNr%2BN5BnoA85zasb6N7S8LPLvqKtLIYvCazBvOSrAm8HzNvGlCWsGmSTlLU5TjwRZ%2F5ElrtMk2MO5iyUkRWUtHaNjlWqnreMGRHohzMTRtO4r40RSrzjFPru0N1wAf0\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854c1fbf125689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1402\u0026min_rtt=842\u0026rtt_var=248\u0026sent=746\u0026recv=140\u0026lost=0\u0026retrans=0\u0026sent_bytes=770481\u0026recv_bytes=44053\u0026delivery_rate=579745\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=10529\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21477,"size_decoded":21477,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21340)","md5":"a0980d43cea486530c30f9f5e1c1b5e4","sha1":"deec93f70f8b813b479137075afa6a0a3a25b8bd","sha256":"4b5eeb1400e5118a1aff286d9a6cf893bd7c08fc8247c62116238ea587890e9e","sha512":"9ac9939efa609ace82b5aed5157468098f6e0a25906bdbed44a4ce99fc822004b7c0a6ead8d6de6b148f7b8438ef9aac944e0ec8b1fe0c4825ea9195d500af00","ssdeep":"384:1AdJR5l17Hc+yWId88Q+0VL3oQ0LmVIkTzxr1QQ02NBTQ2tp2TLRX8tRiWyI:1AdJR7dHt8cVL3oQ0LeIkf502NBTQUYW","tlshash":"f6a21bb766f915d652e848e808cb189951f4e0223d86293e5134edd220f2cdbf2fb97d","first_seen":"2024-12-12T09:50:13.265257Z","last_seen":"2026-04-04T23:52:43.634998Z","times_seen":12704,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/8673.1b6dd8d303b0535cc1f8.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegtrbl.lol/k/","date":"2025-02-27T04:05:34.635Z","timestamp":1740629134635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/8673.1b6dd8d303b0535cc1f8.js HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 08 Feb 2025 22:37:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a7dcb4-29c8\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=C550itsy3T8DOat%2BrOa%2FXRQFV3KHzGD2G4WZFMU4%2FQKe2OQ0xdTPuv3WJzWUEK4O2ENqDDg0QZISaZHT%2FQVEdNe9y2HeRa3I0y5Zs0sXKNUjaIzTJ81hncATMvW086ms\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854c1b7d8b5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1545\u0026min_rtt=842\u0026rtt_var=640\u0026sent=689\u0026recv=125\u0026lost=0\u0026retrans=0\u0026sent_bytes=717227\u0026recv_bytes=38510\u0026delivery_rate=895769\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=9857\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10696,"size_decoded":10696,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10642)","md5":"ea8d5208dada45e8d0844877a7c93db6","sha1":"45d98fbe3dae09a988cccd836d39016c5100f313","sha256":"25f447387cefb643c04e0aa816e21edf562ebe9b7e3f7b808bdb179154fc17b8","sha512":"e95f47a6e80cedfffd956858247f718db6dddf6a9802ca324f384c0e813895a949090cba5c2cad59e6a14d14c736d93954596385c99103de67844a4cd8f99d20","ssdeep":"192:HnCUz1vNz+6YWQ5PMCUNLTF63vy3fEBzXNqYyx7as/m49YA/UovoDc+Eub/:HnN1vNzHYWTavRXoYyxeqm4aAzAD/Eu7","tlshash":"5d22f885b222b4be9296d0d9ea254b03aa3591143c19a1bcf77c79f72c81d4730bcf36","first_seen":"2024-12-10T16:27:28.222065Z","last_seen":"2026-04-04T23:52:43.632681Z","times_seen":12911,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/rlottie-wasm.f013598f1b2ba719f25e.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js","date":"2025-02-27T04:05:36.318Z","timestamp":1740629136318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/rlottie-wasm.f013598f1b2ba719f25e.js HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 08 Feb 2025 22:37:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a7dcb5-10037\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 0\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dnvr4jme54ZNULN6VdWFVDDCBGsNzjRSS%2BpJBqAetVzZEQEK1nilTfuQQWPwG2%2BynOBRmN5VWHuMg0larsHpFmKdoBdCy6%2Bny8hWWIJXaJZHiJxS0Gl1ru3dn0up6z9y\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854c25f93b5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1404\u0026min_rtt=755\u0026rtt_var=329\u0026sent=918\u0026recv=155\u0026lost=0\u0026retrans=0\u0026sent_bytes=963420\u0026recv_bytes=48583\u0026delivery_rate=9176199\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=11732\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":65591,"size_decoded":65591,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4441938ee433d3657c20d454d352a336","sha1":"dd67121d7fda7c17be196f60c72dfa06bcb5bc6f","sha256":"659bf63501a8054ef0eedda3dec466dbc1e9a1b2c4d5d59a285b005215e16679","sha512":"f90da6f2003442e547813d62f44e22e688f637616dd7f7f33c81e73d05a3a3de39947c0a8f580002cc96a716caecc4bcd988644ad78b01ae2e9a9792c726604e","ssdeep":"768:O6T4cK2yQ6eO1P2WgcdxazvszXIgBB1ARna76Ae/FqsSwYxRrqhlr3NqR:m1Q6eO4+IUzXXsjvi1alrcR","tlshash":"6153e88535d9b0ab42837878946f310bf2ab6d52641c8410db1dd4dabcb4e49e63ffe8","first_seen":"2024-05-16T20:37:02Z","last_seen":"2026-04-05T08:03:26.508979Z","times_seen":14961,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":599,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tong1.bu-e.top/script.js","fqdn":"tong1.bu-e.top","domain":"bu-e.top","tld":"top"},"ip":{"addr":"104.21.36.154","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegtrbl.lol/k/","date":"2025-02-27T04:05:30.786Z","timestamp":1740629130786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bu-e.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Feb 2025 19:10:41 GMT","end":"Mon, 12 May 2025 20:09:19 GMT"},"fingerprint":{"sha1":"2B:B5:8C:50:02:A3:26:B3:70:0A:E0:63:64:C5:ED:A0:DE:6F:44:2C","sha256":"9C:0C:78:8F:24:63:82:6A:F5:30:A4:32:CD:7F:4A:76:4C:C5:45:71:D7:D5:6F:CD:F4:99:0F:4D:3F:2D:3B:98"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: tong1.bu-e.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self' undefined\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\naccept-ranges: bytes\r\nlast-modified: Sun, 15 Dec 2024 00:50:05 GMT\r\netag: W/\"a53-193c7cb3a48\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 7737\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Vw8NY1SMJRR7rvThTLzDYM%2BLlmEYS3mzn1%2FEoVatgA8YS9%2FyaVigs71qykFpVzS3gcAXSxqXmkoErPZZa2WL%2F7EfdOrVM23H0yPUW0%2FUTKtIZAZ9w1jwglqat9Y6ti%2FG0g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854c058aa056ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=523\u0026min_rtt=466\u0026rtt_var=159\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3261\u0026recv_bytes=1189\u0026delivery_rate=7337837\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=c9f9d70db25226d0\u0026ts=47\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2643,"size_decoded":2643,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2730), with no line terminators","md5":"397246636abae7979e39b0e891c9b30f","sha1":"32f6895b08a54ca90f02a48aa3716467cfba4d55","sha256":"e6d6622e36c040d3578a25ddc965f5c268942ebd0e1fac6e2e5a8496e4020503","sha512":"e0c550fab3c92982e5183d577b7decae87fa7cfd4c104f526c6a68df83ea2174e9d6b3783fcc8546a56a08deea0975cdff1f60d2a91a66c402b7351657f7f10b","ssdeep":"","tlshash":"e7511af5b299f0b17e5c6cd5c2be9830e12c5732380b4070babe9c8dad1c51551b1faa","first_seen":"2024-12-20T14:28:38.368515Z","last_seen":"2025-04-05T12:41:43.449937Z","times_seen":958,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":344,"dns":310,"connect":1,"send":0,"wait":12,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/5905.db5d2749ecb90aaf2752.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js","date":"2025-02-27T04:05:35.733Z","timestamp":1740629135733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/5905.db5d2749ecb90aaf2752.js HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 08 Feb 2025 22:37:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a7dcb4-223c9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 0\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pU3SEs2lYJfWN6sce6AC8KzeQG7Z%2BmVVC1hKBtM9T%2BOi8AOaaQbpqZ9UN2ABAr1UTibCRI0H%2FcwSVU1NCptI5owsYyFKwFpok823phZKokz6ouoaYeTt76rjEFvGg3lF\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854c225fed5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1378\u0026min_rtt=842\u0026rtt_var=185\u0026sent=797\u0026recv=146\u0026lost=0\u0026retrans=0\u0026sent_bytes=826571\u0026recv_bytes=45966\u0026delivery_rate=68860\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=11103\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":140233,"size_decoded":140233,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"fdd268f67cf5c4f79320041e3d156e98","sha1":"d66194ee702467dd19130dee59bd824990f5bc71","sha256":"36e5ef6880e869bdf9ef2119932dbac7330513aefc50839cc2a6fdde7b519967","sha512":"f8c983fdfc6562b92f7839aad2bb7d4f75a28a43f636d5b4eda8bd25b15eb2cd87e4cc3a78c9de13fb2339c1ffdf95eb6a59c5d8ceb8fccd6fef16c93967810d","ssdeep":"1536:IW3M14X1jDx480MHyQL3YLZHZp+snJhcssuovxz2Rs8:3Xxq8mwmJs9E","tlshash":"8ed3c682f86424125382b1e654760709773af41ca9c941acfe6cfed569bcd8d32afb34","first_seen":"2024-12-10T16:27:28.208403Z","last_seen":"2026-04-04T23:52:43.632167Z","times_seen":12731,"resource_available":false,"data":null}},"time_used":554,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":554,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/5905.db5d2749ecb90aaf2752.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js","date":"2025-02-27T04:05:35.719Z","timestamp":1740629135719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/5905.db5d2749ecb90aaf2752.js HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 08 Feb 2025 22:37:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a7dcb4-223c9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 0\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=a%2FymAWM53Lu0qbYtEiZZiP8R6ErSSjROeRl9sKTQgEcrlSFJpCiDIMukrotCX%2Bx2lk80hGlFkmu5LytjXgHDDgj19oek12xbOW3T%2BxeDIan5IipgVw97q1KYB9MQMRXk\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854c223fe05689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1382\u0026min_rtt=842\u0026rtt_var=147\u0026sent=829\u0026recv=147\u0026lost=0\u0026retrans=0\u0026sent_bytes=864331\u0026recv_bytes=46012\u0026delivery_rate=17892139\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=11106\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":140233,"size_decoded":140233,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"fdd268f67cf5c4f79320041e3d156e98","sha1":"d66194ee702467dd19130dee59bd824990f5bc71","sha256":"36e5ef6880e869bdf9ef2119932dbac7330513aefc50839cc2a6fdde7b519967","sha512":"f8c983fdfc6562b92f7839aad2bb7d4f75a28a43f636d5b4eda8bd25b15eb2cd87e4cc3a78c9de13fb2339c1ffdf95eb6a59c5d8ceb8fccd6fef16c93967810d","ssdeep":"1536:IW3M14X1jDx480MHyQL3YLZHZp+snJhcssuovxz2Rs8:3Xxq8mwmJs9E","tlshash":"8ed3c682f86424125382b1e654760709773af41ca9c941acfe6cfed569bcd8d32afb34","first_seen":"2024-12-10T16:27:28.208403Z","last_seen":"2026-04-04T23:52:43.632167Z","times_seen":12731,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":573,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/main.949acaf34f3882f511ff.css","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://telegtrbl.lol/k/","date":"2025-02-27T04:05:30.783Z","timestamp":1740629130783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/main.949acaf34f3882f511ff.css HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:31 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 08 Feb 2025 22:37:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a7dcb5-1ba95\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LplcfqaPgNo%2FFg3728Sr1w3SP1%2FCg%2Fat5gLwLNSyuZDYs7Ix61%2BB3N0khXCJt4UuHYMFl4kriwRHledkjK9IYpZ1%2FXzrwusUrIUiJQW6M4cYbkTGVVXjF5KzfYq2rsdj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854c035e355689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1972\u0026min_rtt=842\u0026rtt_var=916\u0026sent=606\u0026recv=114\u0026lost=0\u0026retrans=0\u0026sent_bytes=625883\u0026recv_bytes=35194\u0026delivery_rate=22486322\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=6187\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":113301,"size_decoded":113301,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T08:47:05.766455Z","times_seen":13367613,"resource_available":true,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/rlottie-wasm.f013598f1b2ba719f25e.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js","date":"2025-02-27T04:05:36.324Z","timestamp":1740629136324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/rlottie-wasm.f013598f1b2ba719f25e.js HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 08 Feb 2025 22:37:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a7dcb5-10037\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 0\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4BZ0V4y4dTOw%2B4yHRQodQnqdjhQU5TvU1zKt10g51nRTY2Ajx4GQdBxhVs1TOnBcPCq0d1fpeoHNO4wqh%2Bz80Jm5FaKIhCeh3vj%2FJy2P0EaHsMAA7p7jpEfwTY7r7Z6g\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854c26093e5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1404\u0026min_rtt=755\u0026rtt_var=329\u0026sent=938\u0026recv=155\u0026lost=0\u0026retrans=0\u0026sent_bytes=986838\u0026recv_bytes=48583\u0026delivery_rate=9176199\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=11732\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":65591,"size_decoded":65591,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4441938ee433d3657c20d454d352a336","sha1":"dd67121d7fda7c17be196f60c72dfa06bcb5bc6f","sha256":"659bf63501a8054ef0eedda3dec466dbc1e9a1b2c4d5d59a285b005215e16679","sha512":"f90da6f2003442e547813d62f44e22e688f637616dd7f7f33c81e73d05a3a3de39947c0a8f580002cc96a716caecc4bcd988644ad78b01ae2e9a9792c726604e","ssdeep":"768:O6T4cK2yQ6eO1P2WgcdxazvszXIgBB1ARna76Ae/FqsSwYxRrqhlr3NqR:m1Q6eO4+IUzXXsjvi1alrcR","tlshash":"6153e88535d9b0ab42837878946f310bf2ab6d52641c8410db1dd4dabcb4e49e63ffe8","first_seen":"2024-05-16T20:37:02Z","last_seen":"2026-04-05T08:03:26.508979Z","times_seen":14961,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":594,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-27T04:05:24.755Z","timestamp":1740629124755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:25 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 08 Feb 2025 22:37:41 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4%2BcLRNYv6quGqKT9kfDCuIMtZdVAPz8op4%2BvotEJJT1yW0lfRVPdroeyQRXW6wHco1OUQjHNqgzVaivQxdOPVEkWRinf%2BVVn9rfdasBbsxf8FsBQEMtFg0MfHrXKgSub\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854bddd8745691-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5923\u0026min_rtt=543\u0026rtt_var=10793\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3275\u0026recv_bytes=1250\u0026delivery_rate=6621951\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=916aa8b8b1afcde6\u0026ts=425\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14592,"size_decoded":14592,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T08:47:05.766455Z","times_seen":13367613,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":17,"dns":0,"connect":1,"send":0,"wait":406,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/notification.mp3","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://telegtrbl.lol/k/","date":"2025-02-27T04:05:31.653Z","timestamp":1740629131653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/notification.mp3 HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Thu, 27 Feb 2025 04:05:32 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 10880\r\nlast-modified: Sat, 08 Feb 2025 22:37:41 GMT\r\netag: \"67a7dcb5-2a80\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-range: bytes 0-10879/10880\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ijuLiaOh%2Bx25bgnp%2Bpb%2B1crCULbmljYsf7e6J%2BnxKCChdV9B8zV88JmUmcOj7MSdoMWPCHbo5gP%2FrVp3Ug16lBBV%2FhcK1Umy9QxrueQVZ1kyRhSCC%2B8yM%2FC7Md2Mjxiu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 91854c08dfd25689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1762\u0026min_rtt=842\u0026rtt_var=706\u0026sent=672\u0026recv=121\u0026lost=0\u0026retrans=0\u0026sent_bytes=700214\u0026recv_bytes=37811\u0026delivery_rate=60303\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=6859\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":null,"data":{"size":10880,"size_decoded":10880,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"eba09b6a457792c52fc610b5f9f974b3","sha1":"95e6e0f7648e28ea21bc434054ea59aba3a35aea","sha256":"86093551f5a7f68c7dcac947bd8dc54c6a79dd9a5d83f7e40116d640eb28c7d6","sha512":"9dfc5ff830c9ed75c9923528c31e1361fa36500d76a209cd475984e5585a644c8aff1600bf02a658ef363436a51988ff1e63aa7606e541dc4a7b3449c5be4852","ssdeep":"192:RuQQeX7rYX/WUUIk8DLh+2BHpZqlXCYP69tuORf6tVQRa/nwNQBv5JC:RRYeUUEDLk2VClyaV0aZ5g","tlshash":"37226b18af11056ef4866bf0b3939b8dc42d26c37a26d4cdd3a5d7e369430e2a7d500d","first_seen":"2023-05-16T22:57:55Z","last_seen":"2026-04-05T08:03:26.513688Z","times_seen":16538,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":391,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/5905.db5d2749ecb90aaf2752.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js","date":"2025-02-27T04:05:35.692Z","timestamp":1740629135692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/5905.db5d2749ecb90aaf2752.js HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 08 Feb 2025 22:37:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a7dcb4-223c9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pZMHKXppp9D%2BQ4cNuqd91vMBonjd607EA8AdPTNhsN%2F9mAnVKJxfu9ZBFMAbkexY56mBocYtjH5bOdGfvrRd9EI3FVWwLoBXINuAaCf8dfizalK708ECjynYUbWz2GMe\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854c221fd55689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1363\u0026min_rtt=842\u0026rtt_var=205\u0026sent=765\u0026recv=145\u0026lost=0\u0026retrans=0\u0026sent_bytes=788810\u0026recv_bytes=45920\u0026delivery_rate=1280698\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=11098\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":140233,"size_decoded":140233,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"fdd268f67cf5c4f79320041e3d156e98","sha1":"d66194ee702467dd19130dee59bd824990f5bc71","sha256":"36e5ef6880e869bdf9ef2119932dbac7330513aefc50839cc2a6fdde7b519967","sha512":"f8c983fdfc6562b92f7839aad2bb7d4f75a28a43f636d5b4eda8bd25b15eb2cd87e4cc3a78c9de13fb2339c1ffdf95eb6a59c5d8ceb8fccd6fef16c93967810d","ssdeep":"1536:IW3M14X1jDx480MHyQL3YLZHZp+snJhcssuovxz2Rs8:3Xxq8mwmJs9E","tlshash":"8ed3c682f86424125382b1e654760709773af41ca9c941acfe6cfed569bcd8d32afb34","first_seen":"2024-12-10T16:27:28.208403Z","last_seen":"2026-04-04T23:52:43.632167Z","times_seen":12731,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":590,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/5905.db5d2749ecb90aaf2752.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js","date":"2025-02-27T04:05:35.725Z","timestamp":1740629135725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/5905.db5d2749ecb90aaf2752.js HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 08 Feb 2025 22:37:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a7dcb4-223c9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 0\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2F542MKTNF9B7zbY9pJpXzBqvPhhCQgajZgUKyYyjDiY6gX%2BCunfe1ZKecC%2BHBMV6HQa6iQNNWt2YNkxrMAy%2Bb3cKECVuvsejjSmmUn5%2F3wSJCfvDTaOXDw6wSM9y%2FEjn\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854c224fe25689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1436\u0026min_rtt=842\u0026rtt_var=218\u0026sent=861\u0026recv=148\u0026lost=0\u0026retrans=0\u0026sent_bytes=902094\u0026recv_bytes=46058\u0026delivery_rate=10809917\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=11113\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":140233,"size_decoded":140233,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"fdd268f67cf5c4f79320041e3d156e98","sha1":"d66194ee702467dd19130dee59bd824990f5bc71","sha256":"36e5ef6880e869bdf9ef2119932dbac7330513aefc50839cc2a6fdde7b519967","sha512":"f8c983fdfc6562b92f7839aad2bb7d4f75a28a43f636d5b4eda8bd25b15eb2cd87e4cc3a78c9de13fb2339c1ffdf95eb6a59c5d8ceb8fccd6fef16c93967810d","ssdeep":"1536:IW3M14X1jDx480MHyQL3YLZHZp+snJhcssuovxz2Rs8:3Xxq8mwmJs9E","tlshash":"8ed3c682f86424125382b1e654760709773af41ca9c941acfe6cfed569bcd8d32afb34","first_seen":"2024-12-10T16:27:28.208403Z","last_seen":"2026-04-04T23:52:43.632167Z","times_seen":12731,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":573,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-27T04:05:30.517Z","timestamp":1740629130517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/ HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:30 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 08 Feb 2025 22:37:41 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=1,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JUs8QnMDi%2FTq5ykIvc9NaSc8WdJD4M1wWtpKheogbcs1gYLT7AxdiIdFqCwB8mrjJqc9dMaBkYnjVk0e1ju8cqGFYBybg%2BEnX7LsnjMPo28cO7t3G9TE5g4xGC5molLF\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854c01bdb95689-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2225\u0026min_rtt=842\u0026rtt_var=1055\u0026sent=528\u0026recv=106\u0026lost=0\u0026retrans=0\u0026sent_bytes=538766\u0026recv_bytes=32749\u0026delivery_rate=1055\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=5535\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2756,"size_decoded":2756,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2898), with no line terminators","md5":"2d2c2b2ccd50900722f11f5223165627","sha1":"778f69052fbc4058ecb69c2915fb32cc14223434","sha256":"4c5cee97b30adc53b334bcc3f6817c52088ea2d845b6e9600d6ddb2a55911706","sha512":"f11e68e94f95b086fbc189eebeae4c23f106a0123cb8e9e1db4fc0c0f9bea54b37a547b3954e44af426f44366603217a59384b4e3926ca86d3670d5d8cf89000","ssdeep":"","tlshash":"255134675e38d24f2b01db3bd672b09c843af81d9ca0a85474c461ae89e8ff455a7260","first_seen":"2025-01-14T11:37:17.574177Z","last_seen":"2025-04-02T12:27:58.515184Z","times_seen":297,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/favicon.svg","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegtrbl.lol/k/","date":"2025-02-27T04:05:31.952Z","timestamp":1740629131952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/favicon.svg HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 08 Feb 2025 22:37:40 GMT\r\netag: W/\"67a7dcb4-37c\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UHA96Ir9r771CGhlbK5pQ600nfZD0utaiyqdo9yNG1wQZj55UHqbpBaeeak8%2FIL6zfRDpltDs1tk1qcmS4W0x%2FY3WRUyPk1KVRxvMf19aFucYHv%2F3ifT%2B2OFPBJtpv3k\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 91854c0ab8705689-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1627\u0026min_rtt=842\u0026rtt_var=636\u0026sent=686\u0026recv=123\u0026lost=0\u0026retrans=0\u0026sent_bytes=715923\u0026recv_bytes=37903\u0026delivery_rate=1837836\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=7179\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":892,"size_decoded":892,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fbfd454715d8180275b32bd48770a483","sha1":"0716abb57416f83cfad3e17ff830039c0607b313","sha256":"788c238be3597ef42c549caff599bb84e584790f43f7d6013d6a1987264bdbe1","sha512":"72bb407c9f6ef320ae4b6e82b573fd14136af82cfa6996bfa817f1f7a708b19a37b689b75e0a50203ce23167e7786007f72f92d25f441d93bbb4dc804f8c5fd5","ssdeep":"","tlshash":"eb111457d010f719ed89e1679f25dce12153b0cdb9e3559085ea4a28310fcaff844594","first_seen":"2023-05-06T05:06:27Z","last_seen":"2025-04-06T02:37:28.005745Z","times_seen":3136,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/rlottie-wasm.f013598f1b2ba719f25e.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js","date":"2025-02-27T04:05:36.314Z","timestamp":1740629136314,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/rlottie-wasm.f013598f1b2ba719f25e.js HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 08 Feb 2025 22:37:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a7dcb5-10037\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TSeRrRbtuquyGToxGYuvotf5Dc1mSKickI21Pk4Fy8DKD5DTUxaBdNC5Aii8c1qJI%2BigTr0LNVnMEymDJDVuUbD9vNJGKbKDFMTdIduJPgyIL%2FYaFwPY0aSD1tG4M3Ok\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854c25f9385689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1350\u0026min_rtt=755\u0026rtt_var=294\u0026sent=898\u0026recv=154\u0026lost=0\u0026retrans=0\u0026sent_bytes=940006\u0026recv_bytes=48537\u0026delivery_rate=2478\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=11716\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":65591,"size_decoded":65591,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4441938ee433d3657c20d454d352a336","sha1":"dd67121d7fda7c17be196f60c72dfa06bcb5bc6f","sha256":"659bf63501a8054ef0eedda3dec466dbc1e9a1b2c4d5d59a285b005215e16679","sha512":"f90da6f2003442e547813d62f44e22e688f637616dd7f7f33c81e73d05a3a3de39947c0a8f580002cc96a716caecc4bcd988644ad78b01ae2e9a9792c726604e","ssdeep":"768:O6T4cK2yQ6eO1P2WgcdxazvszXIgBB1ARna76Ae/FqsSwYxRrqhlr3NqR:m1Q6eO4+IUzXXsjvi1alrcR","tlshash":"6153e88535d9b0ab42837878946f310bf2ab6d52641c8410db1dd4dabcb4e49e63ffe8","first_seen":"2024-05-16T20:37:02Z","last_seen":"2026-04-05T08:03:26.508979Z","times_seen":14961,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":587,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/rlottie-wasm.f013598f1b2ba719f25e.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js","date":"2025-02-27T04:05:36.321Z","timestamp":1740629136321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/rlottie-wasm.f013598f1b2ba719f25e.js HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 08 Feb 2025 22:37:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a7dcb5-10037\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nage: 0\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8ztFgoRsiHfGeT6oidrG8DPGmQgdSgYr5f%2FP574ooS%2B2qit2P8WsikSC%2BYbTC9O0xKLwjDGkl0Yh6kfXYdhXkJOCYyLQlP79HlNqh%2BN3mQi%2B30QoXZ5vSMA2QLtw6nM1\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854c26093c5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1404\u0026min_rtt=755\u0026rtt_var=329\u0026sent=958\u0026recv=155\u0026lost=0\u0026retrans=0\u0026sent_bytes=1010254\u0026recv_bytes=48583\u0026delivery_rate=9176199\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=11734\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":65591,"size_decoded":65591,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4441938ee433d3657c20d454d352a336","sha1":"dd67121d7fda7c17be196f60c72dfa06bcb5bc6f","sha256":"659bf63501a8054ef0eedda3dec466dbc1e9a1b2c4d5d59a285b005215e16679","sha512":"f90da6f2003442e547813d62f44e22e688f637616dd7f7f33c81e73d05a3a3de39947c0a8f580002cc96a716caecc4bcd988644ad78b01ae2e9a9792c726604e","ssdeep":"768:O6T4cK2yQ6eO1P2WgcdxazvszXIgBB1ARna76Ae/FqsSwYxRrqhlr3NqR:m1Q6eO4+IUzXXsjvi1alrcR","tlshash":"6153e88535d9b0ab42837878946f310bf2ab6d52641c8410db1dd4dabcb4e49e63ffe8","first_seen":"2024-05-16T20:37:02Z","last_seen":"2026-04-05T08:03:26.508979Z","times_seen":14961,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.465390c6e54c60f4a15f.woff2","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://telegtrbl.lol/k/","date":"2025-02-27T04:05:31.649Z","timestamp":1740629131649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.465390c6e54c60f4a15f.woff2 HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/main.949acaf34f3882f511ff.css\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 11016\r\nlast-modified: Sat, 08 Feb 2025 22:37:40 GMT\r\netag: \"67a7dcb4-2b08\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=E9qkqzsiSVWUbgV7rIvbvb3ibnohM6vMUsMlm8qldzpeMOrTBj3uoFbQb7MJQlH5lJ0q0aQbK8snDBHjjn1BUJ9Oj%2Fqm0nGBhXT7WvznaKudCbZoXMjqGApuOsTsQoEB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 91854c08cfce5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1839\u0026min_rtt=842\u0026rtt_var=736\u0026sent=661\u0026recv=118\u0026lost=0\u0026retrans=0\u0026sent_bytes=688213\u0026recv_bytes=36598\u0026delivery_rate=15974694\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=6661\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11016,"size_decoded":11016,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11016, version 1.0","md5":"15fa3062f8929bd3b05fdca5259db412","sha1":"6ff06a34f68ad0324ddec1bbe4d453c959178b36","sha256":"5d1bc9b443f3f81fa4b4ad4634c1bb9702194c1898e3a9de0ab5e2cdc0e9f479","sha512":"07e96d7520b4ede158e77bef10a01a33cd8be7d263fe6900f89c023e65e4a63570e8a442dec2e96030fb563b25610005a748d48f9330fd31eb91b37d1003d376","ssdeep":"192:Tysuo7z1NVoTUYAKVOO7YVxRwHQUXFI5xoBwH9f4d9QFmOfiS:TvdvVoTSjOYR4QUVIgBwpFLaS","tlshash":"6e32af8071ff1c50ff85c2f69be68efa2c2b1895c619016f5240b476397525e9c294bb","first_seen":"2023-04-05T09:25:54Z","last_seen":"2026-04-05T08:03:26.510946Z","times_seen":33016,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/icon-192x192.png","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://telegtrbl.lol/k/","date":"2025-02-27T04:05:31.951Z","timestamp":1740629131951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/icon-192x192.png HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 3059\r\nlast-modified: Sat, 08 Feb 2025 22:37:40 GMT\r\netag: \"67a7dcb4-bf3\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uPlrD%2FZevcoAiZHwW808%2F3GE0RsA30MmorGnAw1VZmhD0atN9WGl6cnyk3%2BCAfg5InECSHySBumf0OMWXp3XEdc6oe0C8xI2E3pJHKVrhqIH%2FNzWW2IkwpbbvMEh6qxw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 91854c0ab86c5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1701\u0026min_rtt=842\u0026rtt_var=650\u0026sent=682\u0026recv=122\u0026lost=0\u0026retrans=0\u0026sent_bytes=712083\u0026recv_bytes=37857\u0026delivery_rate=128098\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=7162\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3059,"size_decoded":3059,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"1a1650d2c76bfc1ac484646c19e495b9","sha1":"fe58d66042ce9241226f5da9370230285ff604fc","sha256":"6e587a62c9d7a97f25265ab5eb29d101ad2e36810042a4116d2dd29da96b0bf8","sha512":"79c5c9278959bc94f66434779bebc1b46c055655f0bc58aa375f179c227e7ac0e52dea196764719d42aadcf98e4fd3b5a4488f2db977edde430aa3df733c03bc","ssdeep":"","tlshash":"bd514cd3253318e8e2dbfd7ace62041f656691ce5638ec120568de720c8985dc070caa","first_seen":"2023-05-16T22:57:55Z","last_seen":"2026-04-05T08:03:26.514147Z","times_seen":16184,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":395,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegtrbl.lol/k/7784.df07a876b22e3b2a83e9.js","fqdn":"telegtrbl.lol","domain":"telegtrbl.lol","tld":"lol"},"ip":{"addr":"172.67.149.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js","date":"2025-02-27T04:05:35.282Z","timestamp":1740629135282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegtrbl.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Feb 2025 11:53:39 GMT","end":"Fri, 23 May 2025 12:52:24 GMT"},"fingerprint":{"sha1":"40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F","sha256":"FF:C6:69:06:BC:C0:D7:E5:38:F9:7F:BD:91:29:66:A4:77:B1:55:00:B1:EA:59:F7:23:89:AC:AA:34:44:4B:55"}}},"request":{"raw":"GET /k/7784.df07a876b22e3b2a83e9.js HTTP/1.1\r\nHost: telegtrbl.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js\r\nCookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 27 Feb 2025 04:05:35 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 08 Feb 2025 22:37:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67a7dcb4-53e5\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZKWYQovbu%2BnoOw3JHQ7X1SMno%2Fvbi4PcwzGZt7fk016hq53zDUIkgh%2BIwoyLhC1jTA3g6aSEnwE0we3DOHPUs3ggk3407fovXd0BTqsdBqyQGO0aZF%2FJpOIDf30WFLV9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 91854c1f8eed5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1412\u0026min_rtt=842\u0026rtt_var=379\u0026sent=729\u0026recv=137\u0026lost=0\u0026retrans=0\u0026sent_bytes=752203\u0026recv_bytes=43369\u0026delivery_rate=4604689\u0026cwnd=88800\u0026unsent_bytes=0\u0026cid=3ee5c19985d020f7\u0026ts=10497\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21477,"size_decoded":21477,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21340)","md5":"a0980d43cea486530c30f9f5e1c1b5e4","sha1":"deec93f70f8b813b479137075afa6a0a3a25b8bd","sha256":"4b5eeb1400e5118a1aff286d9a6cf893bd7c08fc8247c62116238ea587890e9e","sha512":"9ac9939efa609ace82b5aed5157468098f6e0a25906bdbed44a4ce99fc822004b7c0a6ead8d6de6b148f7b8438ef9aac944e0ec8b1fe0c4825ea9195d500af00","ssdeep":"384:1AdJR5l17Hc+yWId88Q+0VL3oQ0LmVIkTzxr1QQ02NBTQ2tp2TLRX8tRiWyI:1AdJR7dHt8cVL3oQ0LeIkf502NBTQUYW","tlshash":"f6a21bb766f915d652e848e808cb189951f4e0223d86293e5134edd220f2cdbf2fb97d","first_seen":"2024-12-12T09:50:13.265257Z","last_seen":"2026-04-04T23:52:43.634998Z","times_seen":12704,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":399,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-27","alert":"Sinkholed","trigger":"telegtrbl.lol","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}