Report - telegosjw.xin/

Report Overview

Visited public
2025-05-14 11:59:01
Tags
URL
telegosjw.xin/
Finishing URL
telegosjw.xin/
IP / ASN
172.67.143.165
#13335 CLOUDFLARENET
Title
Telegram

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
telegosjw.xin	unknown	2025-05-10	2025-05-14	2025-05-14	12 kB	1.4 MB	104.21.39.71

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	From	Size	First Seen	Last Seen
	telegosjw.xin/redirect.js	ScriptElement	325 B	2023-07-27	2025-06-22
Pretty URL telegosjw.xin/redirect.js IP 104.21.39.71 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-27 09:32 Last Seen2025-06-22 12:13 Times Seen9134 Hash 17773b57b87a678c98e26a7cac72df6c 7422857aa75ee81cabcec2eed6c4a6168f363ee1 375141f2d3f04c733276dbff5d9208ff36b2db6a64abcee723179ac24797974f Loading...

	telegosjw.xin/compatTest.js	ScriptElement	2.5 kB	2024-06-30	2025-06-22
Pretty URL telegosjw.xin/compatTest.js IP 104.21.39.71 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-06-30 22:36 Last Seen2025-06-22 15:46 Times Seen9959 Hash da7800ea928a021f2539ab41e6f2323e 0141da1dc85ca8f34212f3dde2fac9bf61f5adb7 15c24ec2b4cb94f24e66750f09e7071e5659e20a5ed926f69f565e20a81027cf Loading...

	telegosjw.xin/main.d54bfa037348b154a941.js	ScriptElement	296 kB	2024-12-10	2025-06-22
Pretty URL telegosjw.xin/main.d54bfa037348b154a941.js IP 104.21.39.71 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-12-10 16:27 Last Seen2025-06-22 12:13 Times Seen7297 Hash a04bc08436674f0eba06d5c190dc6fe5 3d0a8dbececd918da43706976766e246262d254d 4c70083f389a2fafc6a5f3c35179243623b4416cab07a1c6ce08d3f7c1ddb2ae Loading...

	telegosjw.xin/8673.1b6dd8d303b0535cc1f8.js	ScriptElement	11 kB	2024-12-10	2025-06-22
Pretty URL telegosjw.xin/8673.1b6dd8d303b0535cc1f8.js IP 104.21.39.71 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-12-10 16:27 Last Seen2025-06-22 12:13 Times Seen8995 Hash ea8d5208dada45e8d0844877a7c93db6 45d98fbe3dae09a988cccd836d39016c5100f313 25f447387cefb643c04e0aa816e21edf562ebe9b7e3f7b808bdb179154fc17b8 Loading...

HTTP Transactions (26)

	URL	IP	Response	Size
	GET telegosjw.xin/compatTest.js	104.21.39.71	200 OK	2.5 kB
URL GET telegosjw.xin/compatTest.js IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/ Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type JavaScript source, ASCII text, with very long lines (413) Size 2.5 kB (2544 bytes) Hash da7800ea928a021f2539ab41e6f2323e 0141da1dc85ca8f34212f3dde2fac9bf61f5adb7 15c24ec2b4cb94f24e66750f09e7071e5659e20a5ed926f69f565e20a81027cf HTTP Headers `GET /compatTest.js HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Wed, 14 May 2025 11:58:40 GMT content-type: application/javascript server: cloudflare speculation-rules: "/cdn-cgi/speculation" cf-ray: 93fa399d1cdb569c-OSL last-modified: Thu, 13 Mar 2025 12:49:56 GMT vary: Accept-Encoding etag: W/"67d2d474-9f0" content-encoding: gzip cache-control: max-age=14400 cf-cache-status: MISS report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8tvnfTupdNgaNeiizh6%2Fb7u46UV4cEiipR44qs5o23GrUUpKpB8wcKTj2oFjcYj2D6WJVdJGMXg8LTJr0aV0qnLVtGhBGwKTvDm7VLGiq8m4frdIPfPrV7iy%2BGTGOzjn"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} strict-transport-security: max-age=15552000; preload x-content-type-options: nosniff alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=667&min_rtt=420&rtt_var=256&sent=15&recv=16&lost=0&retrans=0&sent_bytes=6427&recv_bytes=1509&delivery_rate=10090592&cwnd=254&unsent_bytes=0&cid=38cc723fadc76e32&ts=1205&x=0" X-Firefox-Spdy: h2

	GET telegosjw.xin/rlottie-wasm.f013598f1b2ba719f25e.js	104.21.39.71	200 OK	66 kB
URL GET telegosjw.xin/rlottie-wasm.f013598f1b2ba719f25e.js IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators Size 66 kB (65591 bytes) Hash 4441938ee433d3657c20d454d352a336 dd67121d7fda7c17be196f60c72dfa06bcb5bc6f 659bf63501a8054ef0eedda3dec466dbc1e9a1b2c4d5d59a285b005215e16679 HTTP Headers `GET /rlottie-wasm.f013598f1b2ba719f25e.js HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Wed, 14 May 2025 11:58:46 GMT content-type: application/javascript report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eJuSmEEDZlxSNujXPCqVHzA6h6lTfyEdbT%2Bk9GEfqpoVvsy0e1VlGIceUZeRfheqe21P%2ByBCaQjQKEP9E5vNw3PYTHEA%2BZ43lWNrRNYsSbhhQ61uXvwMKGb7PYfEWdK%2B"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} last-modified: Thu, 13 Mar 2025 12:49:57 GMT vary: Accept-Encoding etag: W/"67d2d475-10037" content-encoding: gzip cache-control: max-age=14400 cf-cache-status: REVALIDATED cf-ray: 93fa39c16b6d1d0a-CPH server: cloudflare speculation-rules: "/cdn-cgi/speculation" x-content-type-options: nosniff strict-transport-security: max-age=15552000; preload alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=23831&min_rtt=22851&rtt_var=854&sent=260&recv=55&lost=0&retrans=0&sent_bytes=255827&recv_bytes=8134&delivery_rate=3028083&cwnd=108000&unsent_bytes=0&cid=b56a963f63bd61d2&ts=6493&x=16"

	GET telegosjw.xin/rlottie-wasm.f013598f1b2ba719f25e.js	104.21.39.71	200 OK	66 kB
URL GET telegosjw.xin/rlottie-wasm.f013598f1b2ba719f25e.js IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators Size 66 kB (65591 bytes) Hash 4441938ee433d3657c20d454d352a336 dd67121d7fda7c17be196f60c72dfa06bcb5bc6f 659bf63501a8054ef0eedda3dec466dbc1e9a1b2c4d5d59a285b005215e16679 HTTP Headers `GET /rlottie-wasm.f013598f1b2ba719f25e.js HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Wed, 14 May 2025 11:58:46 GMT content-type: application/javascript report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UboCMj%2F1Xlz5YIlOfdH76ReDds8OmiE873NbuDl4TUeGCMZ5ysJuYvForn5ZvSbGMz1zoM1LEXVsGPxwudVkPrxabL96ycMHXjo8d1S73Qep9bxGW8F5a7QZ0PIcw%2BGy"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} last-modified: Thu, 13 Mar 2025 12:49:57 GMT vary: Accept-Encoding etag: W/"67d2d475-10037" content-encoding: gzip cache-control: max-age=14400 cf-cache-status: REVALIDATED cf-ray: 93fa39c18b6e1d0a-CPH server: cloudflare speculation-rules: "/cdn-cgi/speculation" x-content-type-options: nosniff strict-transport-security: max-age=15552000; preload alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=23754&min_rtt=22851&rtt_var=794&sent=302&recv=56&lost=0&retrans=0&sent_bytes=302728&recv_bytes=8179&delivery_rate=56820&cwnd=108000&unsent_bytes=0&cid=b56a963f63bd61d2&ts=6528&x=16"

	GET telegosjw.xin/icon-192x192.png	104.21.39.71	200 OK	3.1 kB
URL GET telegosjw.xin/icon-192x192.png IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/ Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type PNG image data, 192 x 192, 8-bit colormap, non-interlaced Size 3.1 kB (3059 bytes) Hash 1a1650d2c76bfc1ac484646c19e495b9 fe58d66042ce9241226f5da9370230285ff604fc 6e587a62c9d7a97f25265ab5eb29d101ad2e36810042a4116d2dd29da96b0bf8 HTTP Headers `GET /icon-192x192.png HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Wed, 14 May 2025 11:58:41 GMT content-type: image/png content-length: 3059 vary: Accept-Encoding last-modified: Thu, 13 Mar 2025 12:49:56 GMT etag: "67d2d474-bf3" accept-ranges: bytes cache-control: max-age=14400 cf-cache-status: MISS cf-ray: 93fa39a549831d0a-CPH server: cloudflare speculation-rules: "/cdn-cgi/speculation" x-content-type-options: nosniff strict-transport-security: max-age=15552000; preload report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0YcJMt3OrLGmGm2VGIYHV84KsG9WO78VP%2BjswcUAlOXFig2COfG1O%2FxLSs9Y3aQI1XHbz%2BJvayh1juw81OHJHLV4mxj4FSPJX4Wyg1qmfI5u%2BDuT5y5nXHY5AK9RIw4s"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=25908&min_rtt=23015&rtt_var=5538&sent=42&recv=25&lost=0&retrans=0&sent_bytes=28023&recv_bytes=2844&delivery_rate=426989&cwnd=12000&unsent_bytes=0&cid=b56a963f63bd61d2&ts=2000&x=16"

	GET telegosjw.xin/7784.df07a876b22e3b2a83e9.js	104.21.39.71	200 OK	22 kB
URL GET telegosjw.xin/7784.df07a876b22e3b2a83e9.js IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type JavaScript source, ASCII text, with very long lines (21340) Size 22 kB (21477 bytes) Hash a0980d43cea486530c30f9f5e1c1b5e4 deec93f70f8b813b479137075afa6a0a3a25b8bd 4b5eeb1400e5118a1aff286d9a6cf893bd7c08fc8247c62116238ea587890e9e HTTP Headers `GET /7784.df07a876b22e3b2a83e9.js HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Wed, 14 May 2025 11:58:45 GMT content-type: application/javascript report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SjMNl2dthuhTNHo%2BrXTGgH%2B6qO65gCfcd4xzMkrp0TSHpnLIYr5adFYrFVxwsGP04BTduOlb55fFQnjIRwFUIkzwWIAm%2Fh8Rp8r6r5%2B6MAi3eEVBl49XK7IdBBhQaa5A"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} last-modified: Thu, 13 Mar 2025 12:49:56 GMT vary: Accept-Encoding etag: W/"67d2d474-53e5" content-encoding: gzip cache-control: max-age=14400 cf-cache-status: REVALIDATED cf-ray: 93fa39bbbb201d0a-CPH server: cloudflare speculation-rules: "/cdn-cgi/speculation" x-content-type-options: nosniff strict-transport-security: max-age=15552000; preload alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=24781&min_rtt=23015&rtt_var=2551&sent=90&recv=39&lost=0&retrans=0&sent_bytes=68084&recv_bytes=5495&delivery_rate=748551&cwnd=24000&unsent_bytes=0&cid=b56a963f63bd61d2&ts=5593&x=16"

	GET telegosjw.xin/7784.df07a876b22e3b2a83e9.js	104.21.39.71	200 OK	22 kB
URL GET telegosjw.xin/7784.df07a876b22e3b2a83e9.js IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type JavaScript source, ASCII text, with very long lines (21340) Size 22 kB (21477 bytes) Hash a0980d43cea486530c30f9f5e1c1b5e4 deec93f70f8b813b479137075afa6a0a3a25b8bd 4b5eeb1400e5118a1aff286d9a6cf893bd7c08fc8247c62116238ea587890e9e HTTP Headers `GET /7784.df07a876b22e3b2a83e9.js HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Wed, 14 May 2025 11:58:45 GMT content-type: application/javascript report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5M%2BEs2Va4bJiIaOfZuD7NydnFss5ALsZy%2FyQHb6u2YAIzgQb%2FsjfEWNZmT26n0ns8f2wbULE0KpkYfpfAvteTgZjM38RwwH4H87c5CzGVtcDdAQ23VlZcbiiaI9u%2FdKV"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} last-modified: Thu, 13 Mar 2025 12:49:56 GMT vary: Accept-Encoding etag: W/"67d2d474-53e5" content-encoding: gzip cache-control: max-age=14400 cf-cache-status: REVALIDATED cf-ray: 93fa39bbfb231d0a-CPH server: cloudflare speculation-rules: "/cdn-cgi/speculation" x-content-type-options: nosniff strict-transport-security: max-age=15552000; preload alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=24561&min_rtt=23015&rtt_var=2352&sent=117&recv=41&lost=0&retrans=0&sent_bytes=95525&recv_bytes=5819&delivery_rate=23684&cwnd=24000&unsent_bytes=0&cid=b56a963f63bd61d2&ts=5641&x=16"

	GET telegosjw.xin/5905.db5d2749ecb90aaf2752.js	104.21.39.71	200 OK	140 kB
URL GET telegosjw.xin/5905.db5d2749ecb90aaf2752.js IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type ASCII text, with very long lines (65536), with no line terminators Size 140 kB (140233 bytes) Hash fdd268f67cf5c4f79320041e3d156e98 d66194ee702467dd19130dee59bd824990f5bc71 36e5ef6880e869bdf9ef2119932dbac7330513aefc50839cc2a6fdde7b519967 HTTP Headers `GET /5905.db5d2749ecb90aaf2752.js HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Wed, 14 May 2025 11:58:45 GMT content-type: application/javascript report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gX1GkQUiZKM%2FybsFOo6bKyYh7%2B1abKvYRgKqZ4WUrzTEv6hy3xnLvjsDrYTK6pUn5dW8VBd08WT5llheVRvVbkNlNQIH7zICvDayR4osv5AiidH1JNm0%2B9C3NffDGFQU"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} last-modified: Thu, 13 Mar 2025 12:49:56 GMT vary: Accept-Encoding etag: W/"67d2d474-223c9" content-encoding: gzip cache-control: max-age=14400 cf-cache-status: REVALIDATED cf-ray: 93fa39be9b461d0a-CPH server: cloudflare speculation-rules: "/cdn-cgi/speculation" x-content-type-options: nosniff strict-transport-security: max-age=15552000; preload alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=24134&min_rtt=22851&rtt_var=1468&sent=156&recv=48&lost=0&retrans=0&sent_bytes=138324&recv_bytes=6837&delivery_rate=772032&cwnd=33600&unsent_bytes=0&cid=b56a963f63bd61d2&ts=6037&x=16"

	GET telegosjw.xin/5905.db5d2749ecb90aaf2752.js	104.21.39.71	200 OK	140 kB
URL GET telegosjw.xin/5905.db5d2749ecb90aaf2752.js IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type ASCII text, with very long lines (65536), with no line terminators Size 140 kB (140233 bytes) Hash fdd268f67cf5c4f79320041e3d156e98 d66194ee702467dd19130dee59bd824990f5bc71 36e5ef6880e869bdf9ef2119932dbac7330513aefc50839cc2a6fdde7b519967 HTTP Headers `GET /5905.db5d2749ecb90aaf2752.js HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Wed, 14 May 2025 11:58:45 GMT content-type: application/javascript report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wqtI9LdnTB9cmrpQYTTyJYTwmnL5ufxKxdQZuCBe6Gouu%2FqCFFytZn63nAq3f3FCXGXc06U5aPVj0kkzfxynAfv%2BiGdCv4AbTYILCIIfapURPhNED8eihgHOBZp5OzqC"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} last-modified: Thu, 13 Mar 2025 12:49:56 GMT vary: Accept-Encoding etag: W/"67d2d474-223c9" content-encoding: gzip cache-control: max-age=14400 cf-cache-status: REVALIDATED cf-ray: 93fa39beab471d0a-CPH server: cloudflare speculation-rules: "/cdn-cgi/speculation" x-content-type-options: nosniff strict-transport-security: max-age=15552000; preload alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=24006&min_rtt=22851&rtt_var=1357&sent=214&recv=49&lost=0&retrans=0&sent_bytes=205524&recv_bytes=6883&delivery_rate=87096&cwnd=67200&unsent_bytes=0&cid=b56a963f63bd61d2&ts=6071&x=16"

	GET telegosjw.xin/5905.db5d2749ecb90aaf2752.js	104.21.39.71	200 OK	140 kB
URL GET telegosjw.xin/5905.db5d2749ecb90aaf2752.js IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type ASCII text, with very long lines (65536), with no line terminators Size 140 kB (140233 bytes) Hash fdd268f67cf5c4f79320041e3d156e98 d66194ee702467dd19130dee59bd824990f5bc71 36e5ef6880e869bdf9ef2119932dbac7330513aefc50839cc2a6fdde7b519967 HTTP Headers `GET /5905.db5d2749ecb90aaf2752.js HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Wed, 14 May 2025 11:58:45 GMT content-type: application/javascript report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kU8LEbppluPvtfvrOO1ohdEIkZeLiKSfuKEXeQZi1GdRGXlg6PbvRGOSDili4jbRYBxs2rKKTbfKbKtkjsS2ebxC8DlZ9yYTDaJS%2FuI%2FFtX28a9jCdVwtdKbetQu%2FZhn"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} last-modified: Thu, 13 Mar 2025 12:49:56 GMT vary: Accept-Encoding etag: W/"67d2d474-223c9" content-encoding: gzip cache-control: max-age=14400 cf-cache-status: REVALIDATED cf-ray: 93fa39bebb481d0a-CPH server: cloudflare speculation-rules: "/cdn-cgi/speculation" x-content-type-options: nosniff strict-transport-security: max-age=15552000; preload alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=24006&min_rtt=22851&rtt_var=1357&sent=192&recv=49&lost=0&retrans=0&sent_bytes=180211&recv_bytes=6883&delivery_rate=87096&cwnd=67200&unsent_bytes=0&cid=b56a963f63bd61d2&ts=6063&x=16"

	GET telegosjw.xin/	104.21.39.71	200 OK	4.0 kB
URL User Request GET telegosjw.xin/ IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type HTML document, ASCII text, with very long lines (1420) Size 4.0 kB (3985 bytes) Hash 0fee5adc803443262fba64daf6f85d32 c1965ab99c8a1fd7fb2a633a30c6983a4069c9fe 1a81e52147315a47289b53f598d27fe0f128b9e9b3e4455e00f3acb56caf7c9e HTTP Headers `GET / HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Wed, 14 May 2025 11:58:39 GMT content-type: text/html cf-ray: 93fa39988e02569c-OSL server: cloudflare content-encoding: br last-modified: Sun, 30 Mar 2025 14:44:55 GMT vary: Accept-Encoding cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EkqJczV7xcVS1FgH1Nm3%2BLWqoGweHaW5gJNGrIcYpI51HyZyrJgNJCCtHHlaJxlNyceQ1jWhe3uMXgmCinv3sKXSYDxGfW%2FkGHRxNq46qXOP8QdP93ZZAOW3SW0UicDk"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} strict-transport-security: max-age=15552000; preload x-content-type-options: nosniff speculation-rules: "/cdn-cgi/speculation" alt-svc: h3=":443"; ma=86400 server-timing: cfCacheStatus;desc="DYNAMIC", cfL4;desc="?proto=TCP&rtt=597&min_rtt=457&rtt_var=187&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3204&recv_bytes=1116&delivery_rate=5723320&cwnd=254&unsent_bytes=0&cid=38cc723fadc76e32&ts=441&x=0" X-Firefox-Spdy: h2

	GET telegosjw.xin/main.d54bfa037348b154a941.js	104.21.39.71	200 OK	296 kB
URL GET telegosjw.xin/main.d54bfa037348b154a941.js IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/ Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators Size 296 kB (296503 bytes) Hash a04bc08436674f0eba06d5c190dc6fe5 3d0a8dbececd918da43706976766e246262d254d 4c70083f389a2fafc6a5f3c35179243623b4416cab07a1c6ce08d3f7c1ddb2ae HTTP Headers `GET /main.d54bfa037348b154a941.js HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Wed, 14 May 2025 11:58:40 GMT content-type: application/javascript server: cloudflare speculation-rules: "/cdn-cgi/speculation" cf-ray: 93fa399d1ccb569c-OSL last-modified: Thu, 13 Mar 2025 12:49:57 GMT vary: Accept-Encoding etag: W/"67d2d475-48637" content-encoding: gzip cache-control: max-age=14400 cf-cache-status: MISS report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IGILFvzS1YLcQ8jxOosLrWctX%2F%2F%2FpZp1rZaQ49InzoT2pFkoKcNKQ3%2FVee3%2FgrMwChjYLQNynkaey6BgS5LSQavi5zuxNuRAvsl%2FKYtNAD14iU7T7X5RGLqHWV1xAqBD"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} strict-transport-security: max-age=15552000; preload x-content-type-options: nosniff alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1721&min_rtt=420&rtt_var=1497&sent=40&recv=33&lost=0&retrans=0&sent_bytes=36062&recv_bytes=1509&delivery_rate=25920260&cwnd=254&unsent_bytes=0&cid=38cc723fadc76e32&ts=1477&x=0" X-Firefox-Spdy: h2

	GET telegosjw.xin/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.465390c6e54c60f4a15f.woff2	104.21.39.71	200 OK	11 kB
URL GET telegosjw.xin/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.465390c6e54c60f4a15f.woff2 IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/ Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type Web Open Font Format (Version 2), TrueType, length 11016, version 1.0 Size 11 kB (11016 bytes) Hash 15fa3062f8929bd3b05fdca5259db412 6ff06a34f68ad0324ddec1bbe4d453c959178b36 5d1bc9b443f3f81fa4b4ad4634c1bb9702194c1898e3a9de0ab5e2cdc0e9f479 HTTP Headers GET /KFOmCnqEu92Fr1Mu4mxKKTU1Kg.465390c6e54c60f4a15f.woff2 HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: identity DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/main.949acaf34f3882f511ff.css Sec-Fetch-Dest: font Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/3 200 OK date: Wed, 14 May 2025 11:58:41 GMT content-type: font/woff2 content-length: 11016 vary: Accept-Encoding last-modified: Thu, 13 Mar 2025 12:49:56 GMT etag: "67d2d474-2b08" cache-control: max-age=14400 cf-cache-status: MISS accept-ranges: bytes cf-ray: 93fa39a3f96d1d0a-CPH server: cloudflare speculation-rules: "/cdn-cgi/speculation" x-content-type-options: nosniff strict-transport-security: max-age=15552000; preload report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zRjyYM8B%2FhXJIOu8uMc77KoZpfNWr4TemcrkIqqc51u5wPDXLCTv9QmCO416%2F8B904YIdUxYZJhxB8V3iJfPp90sjwztWrUwZnv%2FQK8NMI6nf9s7Q99wPCehAvEggJjO"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=26130&min_rtt=23015&rtt_var=8882&sent=32&recv=23&lost=0&retrans=0&sent_bytes=16061&recv_bytes=2756&delivery_rate=1179&cwnd=12000&unsent_bytes=0&cid=b56a963f63bd61d2&ts=1820&x=16"

	GET telegosjw.xin/7784.df07a876b22e3b2a83e9.js	104.21.39.71	200 OK	22 kB
URL GET telegosjw.xin/7784.df07a876b22e3b2a83e9.js IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type JavaScript source, ASCII text, with very long lines (21340) Size 22 kB (21477 bytes) Hash a0980d43cea486530c30f9f5e1c1b5e4 deec93f70f8b813b479137075afa6a0a3a25b8bd 4b5eeb1400e5118a1aff286d9a6cf893bd7c08fc8247c62116238ea587890e9e HTTP Headers `GET /7784.df07a876b22e3b2a83e9.js HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Wed, 14 May 2025 11:58:45 GMT content-type: application/javascript report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YxEN%2BugMQ26PAOgg5OybTw%2Bvo5rW80qrN7tGl0XQDNP3VwkbghV2KtTnNHlZGBci5HXpytUOJ%2B53nbtEBKFo%2BA9ouO7DhHEOVx3hVVlYjJO9lVoPJczOLDlUindQUmnE"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} last-modified: Thu, 13 Mar 2025 12:49:56 GMT vary: Accept-Encoding etag: W/"67d2d474-53e5" content-encoding: gzip cache-control: max-age=14400 cf-cache-status: REVALIDATED cf-ray: 93fa39bbeb211d0a-CPH server: cloudflare speculation-rules: "/cdn-cgi/speculation" x-content-type-options: nosniff strict-transport-security: max-age=15552000; preload alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=24561&min_rtt=23015&rtt_var=2352&sent=108&recv=41&lost=0&retrans=0&sent_bytes=86377&recv_bytes=5819&delivery_rate=23684&cwnd=24000&unsent_bytes=0&cid=b56a963f63bd61d2&ts=5639&x=16"

	GET telegosjw.xin/7784.df07a876b22e3b2a83e9.js	104.21.39.71	200 OK	22 kB
URL GET telegosjw.xin/7784.df07a876b22e3b2a83e9.js IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type JavaScript source, ASCII text, with very long lines (21340) Size 22 kB (21477 bytes) Hash a0980d43cea486530c30f9f5e1c1b5e4 deec93f70f8b813b479137075afa6a0a3a25b8bd 4b5eeb1400e5118a1aff286d9a6cf893bd7c08fc8247c62116238ea587890e9e HTTP Headers `GET /7784.df07a876b22e3b2a83e9.js HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Wed, 14 May 2025 11:58:45 GMT content-type: application/javascript report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xnQ9ZM%2FkIHLhmTZzHKbBgAewBXHKa8a5zI%2B18lbrKm00jdFki7AzJKDN6c5Ac91%2Bqka9VKD6kAsfsfBuh0KNSSa2bQTQK2peDgDmosYYH5nNpnC%2BIhaLbZIsfn07PB2F"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} last-modified: Thu, 13 Mar 2025 12:49:56 GMT vary: Accept-Encoding etag: W/"67d2d474-53e5" content-encoding: gzip cache-control: max-age=14400 cf-cache-status: REVALIDATED cf-ray: 93fa39bbeb221d0a-CPH server: cloudflare speculation-rules: "/cdn-cgi/speculation" x-content-type-options: nosniff strict-transport-security: max-age=15552000; preload alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=24561&min_rtt=23015&rtt_var=2352&sent=98&recv=40&lost=0&retrans=0&sent_bytes=77205&recv_bytes=5539&delivery_rate=23684&cwnd=24000&unsent_bytes=0&cid=b56a963f63bd61d2&ts=5623&x=16"

	GET telegosjw.xin/rlottie-wasm.f013598f1b2ba719f25e.js	104.21.39.71	200 OK	66 kB
URL GET telegosjw.xin/rlottie-wasm.f013598f1b2ba719f25e.js IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators Size 66 kB (65591 bytes) Hash 4441938ee433d3657c20d454d352a336 dd67121d7fda7c17be196f60c72dfa06bcb5bc6f 659bf63501a8054ef0eedda3dec466dbc1e9a1b2c4d5d59a285b005215e16679 HTTP Headers `GET /rlottie-wasm.f013598f1b2ba719f25e.js HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Wed, 14 May 2025 11:58:46 GMT content-type: application/javascript report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CK%2FN5h9L5NpwztcIgalN1d8xn5NUNC%2BD4yQBdEQkTJpX3A6LEWgqm7ys7E2R2SGBnTzLSMzHIfMB8%2FYmhJEtM4J30K7sFIImuBAeSDl6Zk6Dx3lzApXLdELENRZ6GkOd"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} last-modified: Thu, 13 Mar 2025 12:49:57 GMT vary: Accept-Encoding etag: W/"67d2d475-10037" content-encoding: gzip cache-control: max-age=14400 cf-cache-status: REVALIDATED cf-ray: 93fa39c19b6f1d0a-CPH server: cloudflare speculation-rules: "/cdn-cgi/speculation" x-content-type-options: nosniff strict-transport-security: max-age=15552000; preload alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=23608&min_rtt=22851&rtt_var=684&sent=324&recv=60&lost=0&retrans=0&sent_bytes=326195&recv_bytes=8773&delivery_rate=975357&cwnd=108000&unsent_bytes=0&cid=b56a963f63bd61d2&ts=6565&x=16"

	GET telegosjw.xin/2976.4e6e9b1254ce313f06c5.js	104.21.39.71	200 OK	14 kB
URL GET telegosjw.xin/2976.4e6e9b1254ce313f06c5.js IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/ Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type JavaScript source, ASCII text, with very long lines (14402) Size 14 kB (14456 bytes) Hash 6471dbad18ad444906e7a2bbac930e90 2c1f84caf20c633205f7535b129ae069187ef14d 1fce51354cfb15e01d900a86d9806d476a4ceb7fd409a5f2744e8bb81fab56e8 HTTP Headers `GET /2976.4e6e9b1254ce313f06c5.js HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/ Sec-Fetch-Dest: worker Sec-Fetch-Mode: same-origin Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Wed, 14 May 2025 11:58:45 GMT content-type: application/javascript report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MtoWMxhXfcWfpy22rIauoO5A9gNdXcz1Cq5VKiFXujZy7EWcLSva2%2BzZlNCSYQW58sqQUk%2Fkk7NgiWof8W1cP%2Fhl6viqhpUzXUgujWfzLL%2FWeaBFhvKW6XzCmZwSl0Ta"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} last-modified: Thu, 13 Mar 2025 12:49:56 GMT vary: Accept-Encoding etag: W/"67d2d474-3878" content-encoding: gzip age: 0 cache-control: max-age=14400 cf-cache-status: HIT cf-ray: 93fa39b95b001d0a-CPH server: cloudflare speculation-rules: "/cdn-cgi/speculation" x-content-type-options: nosniff strict-transport-security: max-age=15552000; preload alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=25037&min_rtt=23015&rtt_var=3655&sent=69&recv=33&lost=0&retrans=0&sent_bytes=50011&recv_bytes=4283&delivery_rate=11632&cwnd=12000&unsent_bytes=0&cid=b56a963f63bd61d2&ts=5184&x=16"

	GET telegosjw.xin/main.949acaf34f3882f511ff.css	104.21.39.71	200 OK	113 kB
URL GET telegosjw.xin/main.949acaf34f3882f511ff.css IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/ Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type ASCII text, with very long lines (11396) Size 113 kB (113301 bytes) Hash aee6b880777f1918fcc9894e87cdcd1b 567e64fccfda3449f840168ee2bb8eb09a267218 d5e81ea05db27d47fa91e6bd4d675cc1c8eeec9341a4db7859359a7c5ee5fca3 HTTP Headers `GET /main.949acaf34f3882f511ff.css HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Wed, 14 May 2025 11:58:40 GMT content-type: text/css server: cloudflare speculation-rules: "/cdn-cgi/speculation" cf-ray: 93fa399d1cd7569c-OSL last-modified: Thu, 13 Mar 2025 12:49:57 GMT vary: Accept-Encoding etag: W/"67d2d475-1ba95" content-encoding: gzip cache-control: max-age=14400 cf-cache-status: MISS report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h4o%2F%2FI8EVXS7mW%2FMciwdTT6JXASuwjLS3Uf6brO8Zffudbu%2BzBAvBlZvgECJd1jRdfOQ0Xo%2BPzAij2DgFfjDWO5HpdTi49Z5uy9TrJNXT6fp7q88OvMUaiH7xCNemnf5"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} strict-transport-security: max-age=15552000; preload x-content-type-options: nosniff alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=6046&min_rtt=420&rtt_var=10938&sent=18&recv=18&lost=0&retrans=0&sent_bytes=7951&recv_bytes=1509&delivery_rate=10090592&cwnd=254&unsent_bytes=0&cid=38cc723fadc76e32&ts=1404&x=0" X-Firefox-Spdy: h2

	GET telegosjw.xin/favicon.svg	104.21.39.71	200 OK	892 B
URL GET telegosjw.xin/favicon.svg IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/ Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type SVG Scalable Vector Graphics image Size 892 B (892 bytes) Hash d9ee2d4b0edd9f8ba2fb7242162c2c47 398522893cf2cdefb5176f11bc67eab31c2d7382 a462f1c5333e16b48335054493cfd1d0a13a96847b4b9ffe2cf24403e6e86010 HTTP Headers `GET /favicon.svg HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Wed, 14 May 2025 11:58:41 GMT content-type: image/svg+xml vary: Accept-Encoding strict-transport-security: max-age=15552000; preload last-modified: Thu, 13 Mar 2025 12:49:56 GMT etag: W/"67d2d474-37c" cache-control: max-age=14400 cf-cache-status: MISS content-encoding: br cf-ray: 93fa39a559841d0a-CPH server: cloudflare speculation-rules: "/cdn-cgi/speculation" x-content-type-options: nosniff report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LZg0xRoSKeGfko1CwtlTWTbNWtA5FgjwTUzLn96pg8QUWx28%2Bct9KW7JqZ2heyGHOtuBozWOLQCHOBHCmP7du5skzvGsDTCfrMVx1auD9lIL6MYKOK39XqOuB2HbHOzC"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=25908&min_rtt=23015&rtt_var=5538&sent=46&recv=25&lost=0&retrans=0&sent_bytes=31855&recv_bytes=2844&delivery_rate=426989&cwnd=12000&unsent_bytes=0&cid=b56a963f63bd61d2&ts=2023&x=16"

	GET telegosjw.xin/8673.1b6dd8d303b0535cc1f8.js	104.21.39.71	200 OK	11 kB
URL GET telegosjw.xin/8673.1b6dd8d303b0535cc1f8.js IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/ Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type JavaScript source, ASCII text, with very long lines (10642) Size 11 kB (10696 bytes) Hash ea8d5208dada45e8d0844877a7c93db6 45d98fbe3dae09a988cccd836d39016c5100f313 25f447387cefb643c04e0aa816e21edf562ebe9b7e3f7b808bdb179154fc17b8 HTTP Headers `GET /8673.1b6dd8d303b0535cc1f8.js HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Wed, 14 May 2025 11:58:44 GMT content-type: application/javascript report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QOrui9Q%2F3icKf1kJrWXPWejSOzl9w%2FAZ8HD8OAjNHmHW%2FP%2BV7oflInaVXYlrqFtxNhpaDnpcCDIqI4qtlI3UQLDq3l9ErUR3q5ZMxAMOYeRpl20ZCfkOJRAB1UdhmFFj"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} last-modified: Thu, 13 Mar 2025 12:49:56 GMT vary: Accept-Encoding etag: W/"67d2d474-29c8" content-encoding: gzip cache-control: max-age=14400 cf-cache-status: REVALIDATED cf-ray: 93fa39b69ae01d0a-CPH server: cloudflare speculation-rules: "/cdn-cgi/speculation" x-content-type-options: nosniff strict-transport-security: max-age=15552000; preload alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=25298&min_rtt=23015&rtt_var=4176&sent=49&recv=28&lost=0&retrans=0&sent_bytes=33152&recv_bytes=3183&delivery_rate=52916&cwnd=12000&unsent_bytes=0&cid=b56a963f63bd61d2&ts=4764&x=16"

	GET telegosjw.xin/2976.4e6e9b1254ce313f06c5.js	104.21.39.71	200 OK	14 kB
URL GET telegosjw.xin/2976.4e6e9b1254ce313f06c5.js IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/ Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type JavaScript source, ASCII text, with very long lines (14402) Size 14 kB (14456 bytes) Hash 6471dbad18ad444906e7a2bbac930e90 2c1f84caf20c633205f7535b129ae069187ef14d 1fce51354cfb15e01d900a86d9806d476a4ceb7fd409a5f2744e8bb81fab56e8 HTTP Headers `GET /2976.4e6e9b1254ce313f06c5.js HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/ Sec-Fetch-Dest: worker Sec-Fetch-Mode: same-origin Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Wed, 14 May 2025 11:58:45 GMT content-type: application/javascript report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A2uG0LDHkpim%2FD%2BGoakBjhcDKJUxPSeUIKx1wKiwuFakciur9L%2Flkyfx%2Bv3MGj3hb7a3Vizv97O1YTvD9nhO56xTRi5O2FWB5E1y6r3HSUmDx6i8yqYoSIpG8j0DFxoc"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} last-modified: Thu, 13 Mar 2025 12:49:56 GMT vary: Accept-Encoding etag: W/"67d2d474-3878" content-encoding: gzip age: 0 cache-control: max-age=14400 cf-cache-status: HIT cf-ray: 93fa39b95afe1d0a-CPH server: cloudflare speculation-rules: "/cdn-cgi/speculation" x-content-type-options: nosniff strict-transport-security: max-age=15552000; preload alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=25037&min_rtt=23015&rtt_var=3655&sent=57&recv=33&lost=0&retrans=0&sent_bytes=38011&recv_bytes=4283&delivery_rate=11632&cwnd=12000&unsent_bytes=0&cid=b56a963f63bd61d2&ts=5167&x=16"

	GET telegosjw.xin/2976.4e6e9b1254ce313f06c5.js	104.21.39.71	200 OK	14 kB
URL GET telegosjw.xin/2976.4e6e9b1254ce313f06c5.js IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/ Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type JavaScript source, ASCII text, with very long lines (14402) Size 14 kB (14456 bytes) Hash 6471dbad18ad444906e7a2bbac930e90 2c1f84caf20c633205f7535b129ae069187ef14d 1fce51354cfb15e01d900a86d9806d476a4ceb7fd409a5f2744e8bb81fab56e8 HTTP Headers `GET /2976.4e6e9b1254ce313f06c5.js HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/ Sec-Fetch-Dest: worker Sec-Fetch-Mode: same-origin Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Wed, 14 May 2025 11:58:45 GMT content-type: application/javascript report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OyczhlsY9zNpmMxZXwvkAAMl%2FzWhYXUiIK2n0T4U3NLIcET%2FSt71CeqIu%2FEgL7lXfXKQQfVXfgJyaq0isM7zk3R%2FXPthspmfAkedbJbisptcPtdJFwhYPfPni16bJFJ7"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} last-modified: Thu, 13 Mar 2025 12:49:56 GMT vary: Accept-Encoding etag: W/"67d2d474-3878" content-encoding: gzip cache-control: max-age=14400 cf-cache-status: MISS cf-ray: 93fa39b94afd1d0a-CPH server: cloudflare speculation-rules: "/cdn-cgi/speculation" x-content-type-options: nosniff strict-transport-security: max-age=15552000; preload alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=25037&min_rtt=23015&rtt_var=3655&sent=65&recv=33&lost=0&retrans=0&sent_bytes=45521&recv_bytes=4283&delivery_rate=11632&cwnd=12000&unsent_bytes=0&cid=b56a963f63bd61d2&ts=5167&x=16"

	GET telegosjw.xin/notification.mp3	104.21.39.71	206 Partial Content	11 kB
URL GET telegosjw.xin/notification.mp3 IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/ Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo Size 11 kB (10880 bytes) Hash eba09b6a457792c52fc610b5f9f974b3 95e6e0f7648e28ea21bc434054ea59aba3a35aea 86093551f5a7f68c7dcac947bd8dc54c6a79dd9a5d83f7e40116d640eb28c7d6 HTTP Headers `GET /notification.mp3 HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: audio/webm,audio/ogg,audio/wav,audio/;q=0.9,application/ogg;q=0.7,video/;q=0.6,/;q=0.5 Accept-Language: en-US,en;q=0.5 Range: bytes=0- DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/ Sec-Fetch-Dest: audio Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Accept-Encoding: identity Pragma: no-cache Cache-Control: no-cache` HTTP/3 206 Partial Content date: Wed, 14 May 2025 11:58:41 GMT content-type: audio/mpeg content-length: 10880 vary: Accept-Encoding last-modified: Thu, 13 Mar 2025 12:49:57 GMT etag: "67d2d475-2a80" accept-ranges: bytes content-range: bytes 0-10879/10880 cache-control: max-age=14400 cf-cache-status: REVALIDATED cf-ray: 93fa39a4196e1d0a-CPH server: cloudflare speculation-rules: "/cdn-cgi/speculation" x-content-type-options: nosniff strict-transport-security: max-age=15552000; preload report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ECVrN0G7YJYDLu9b8vjhwlk%2B3zpb2Gi20O%2FzXOGUPVv0h1Q8xDAtQHo33WwrAeJOD0poZLWZVEdeSdeOzzOuLO8VSs2c733q5uD34edt0ZTaaK%2BOnJEFL1FRLhK0%2BOo7"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=26130&min_rtt=23015&rtt_var=8882&sent=22&recv=23&lost=0&retrans=0&sent_bytes=4169&recv_bytes=2756&delivery_rate=1179&cwnd=12000&unsent_bytes=0&cid=b56a963f63bd61d2&ts=1801&x=16"

	GET telegosjw.xin/5905.db5d2749ecb90aaf2752.js	104.21.39.71	200 OK	140 kB
URL GET telegosjw.xin/5905.db5d2749ecb90aaf2752.js IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type ASCII text, with very long lines (65536), with no line terminators Size 140 kB (140233 bytes) Hash fdd268f67cf5c4f79320041e3d156e98 d66194ee702467dd19130dee59bd824990f5bc71 36e5ef6880e869bdf9ef2119932dbac7330513aefc50839cc2a6fdde7b519967 HTTP Headers `GET /5905.db5d2749ecb90aaf2752.js HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Wed, 14 May 2025 11:58:45 GMT content-type: application/javascript report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mJ7sniWd%2BME2VKkB9WVfnPjtZXqyf%2F%2BjuKLqqu%2Fj6gCkq7lo6z4B3O4ZszjhtzCgVEHdls6gIsXvHB%2BFXrU4dfxr65%2BTXSbEjoyw2PHcT8PlQnFnMC%2BwwZqZi%2BTjzEBr"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} last-modified: Thu, 13 Mar 2025 12:49:56 GMT vary: Accept-Encoding etag: W/"67d2d474-223c9" content-encoding: gzip cache-control: max-age=14400 cf-cache-status: REVALIDATED cf-ray: 93fa39be6b441d0a-CPH server: cloudflare speculation-rules: "/cdn-cgi/speculation" x-content-type-options: nosniff strict-transport-security: max-age=15552000; preload alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=24134&min_rtt=22851&rtt_var=1468&sent=128&recv=48&lost=0&retrans=0&sent_bytes=104724&recv_bytes=6837&delivery_rate=772032&cwnd=33600&unsent_bytes=0&cid=b56a963f63bd61d2&ts=6032&x=16"

	GET telegosjw.xin/redirect.js	104.21.39.71	200 OK	325 B
URL GET telegosjw.xin/redirect.js IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/ Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type ASCII text Size 325 B (325 bytes) Hash 17773b57b87a678c98e26a7cac72df6c 7422857aa75ee81cabcec2eed6c4a6168f363ee1 375141f2d3f04c733276dbff5d9208ff36b2db6a64abcee723179ac24797974f HTTP Headers `GET /redirect.js HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Wed, 14 May 2025 11:58:40 GMT content-type: application/javascript cf-ray: 93fa399d1cc9569c-OSL server: cloudflare content-encoding: br last-modified: Thu, 13 Mar 2025 12:49:57 GMT etag: W/"67d2d475-145" cache-control: max-age=14400 cf-cache-status: REVALIDATED report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bPtFxU4lEk0Okr%2Fr6iXowVw1qOqN0kNRI08mw07U9aOYHt6ff%2BcK7NogMRaxjrvRc9bZkEZqrpQ6Qdxi4gVFIrB9LCExrzNy81FASPnlXv7T8G6H7S9vvW3%2FHqAAFVu1"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding strict-transport-security: max-age=15552000; preload x-content-type-options: nosniff speculation-rules: "/cdn-cgi/speculation" alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=594&min_rtt=420&rtt_var=146&sent=13&recv=15&lost=0&retrans=0&sent_bytes=5660&recv_bytes=1509&delivery_rate=10090592&cwnd=254&unsent_bytes=0&cid=38cc723fadc76e32&ts=1199&x=0" X-Firefox-Spdy: h2

	GET telegosjw.xin/rlottie-wasm.f013598f1b2ba719f25e.js	104.21.39.71	200 OK	66 kB
URL GET telegosjw.xin/rlottie-wasm.f013598f1b2ba719f25e.js IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators Size 66 kB (65591 bytes) Hash 4441938ee433d3657c20d454d352a336 dd67121d7fda7c17be196f60c72dfa06bcb5bc6f 659bf63501a8054ef0eedda3dec466dbc1e9a1b2c4d5d59a285b005215e16679 HTTP Headers `GET /rlottie-wasm.f013598f1b2ba719f25e.js HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/2976.4e6e9b1254ce313f06c5.js Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Wed, 14 May 2025 11:58:46 GMT content-type: application/javascript report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nJuWyOjidaStTzYjS3LyLQrWoS6EwVF1fRkJQA5wmWk1jekNVNHDC8UzL1zr7D22V4i%2BJ6V7n9478SnZ5I8FNwandJklmQEEFwHJ2eljxFUK3az9jNoDd6YLRYVw1OI8"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} last-modified: Thu, 13 Mar 2025 12:49:57 GMT vary: Accept-Encoding etag: W/"67d2d475-10037" content-encoding: gzip cache-control: max-age=14400 cf-cache-status: REVALIDATED cf-ray: 93fa39c16b6c1d0a-CPH server: cloudflare speculation-rules: "/cdn-cgi/speculation" x-content-type-options: nosniff strict-transport-security: max-age=15552000; preload alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=23831&min_rtt=22851&rtt_var=854&sent=281&recv=55&lost=0&retrans=0&sent_bytes=279280&recv_bytes=8134&delivery_rate=3028083&cwnd=108000&unsent_bytes=0&cid=b56a963f63bd61d2&ts=6505&x=16"

	GET telegosjw.xin/2976.4e6e9b1254ce313f06c5.js	104.21.39.71	200 OK	14 kB
URL GET telegosjw.xin/2976.4e6e9b1254ce313f06c5.js IP 104.21.39.71:443 ASN #13335 CLOUDFLARENET Requested by https://telegosjw.xin/ Certificate IssuerGoogle Trust Services Subjecttelegosjw.xin FingerprintD2:87:97:DF:CB:E4:F9:97:FA:3F:DB:44:17:DB:44:9D:59:EE:95:57 ValiditySat, 10 May 2025 07:59:46 GMT - Fri, 08 Aug 2025 08:58:11 GMT File type JavaScript source, ASCII text, with very long lines (14402) Size 14 kB (14456 bytes) Hash 6471dbad18ad444906e7a2bbac930e90 2c1f84caf20c633205f7535b129ae069187ef14d 1fce51354cfb15e01d900a86d9806d476a4ceb7fd409a5f2744e8bb81fab56e8 HTTP Headers `GET /2976.4e6e9b1254ce313f06c5.js HTTP/1.1 Host: telegosjw.xin User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://telegosjw.xin/ Sec-Fetch-Dest: worker Sec-Fetch-Mode: same-origin Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Wed, 14 May 2025 11:58:45 GMT content-type: application/javascript report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cob61u6BsqCcyi%2FjpH8fXci1n%2FPTMuhY5XxJg%2BdWGv%2BACdmoEGXYfFqNX5r9AObG5cKtaGiwWmY%2BTyQ3tZQ3ugdHEOI8oBuFY92Id9yL9uEIZPN5CsnwAA6BfVLwrfk%2B"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} last-modified: Thu, 13 Mar 2025 12:49:56 GMT vary: Accept-Encoding etag: W/"67d2d474-3878" content-encoding: gzip age: 0 cache-control: max-age=14400 cf-cache-status: HIT cf-ray: 93fa39b95aff1d0a-CPH server: cloudflare speculation-rules: "/cdn-cgi/speculation" x-content-type-options: nosniff strict-transport-security: max-age=15552000; preload alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=25037&min_rtt=23015&rtt_var=3655&sent=69&recv=33&lost=0&retrans=0&sent_bytes=50011&recv_bytes=4283&delivery_rate=11632&cwnd=12000&unsent_bytes=0&cid=b56a963f63bd61d2&ts=5171&x=16"

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (26)

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET

IP

ASN