{"report_id":"bc18b3b7-01fe-41ca-b4c1-d0aa7a2c1ec0","version":6,"status":"done","tags":[],"date":"2026-03-23T08:47:18Z","url":{"schema":"http","addr":"bcvvgee.com","fqdn":"bcvvgee.com","domain":"bcvvgee.com","tld":"com"},"ip":{"addr":"43.155.174.32","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"South Korea","country_code":"KR"},"final":{"url":{"schema":"https","addr":"web.telegram.org/a/","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"title":"Unsupported Browser","dom":{"size":3577,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2855)","md5":"ecdecb061438b6b8c82f59f61bbd9649","sha1":"e986b4103527e15c0e9facaf62c276235381ef31","sha256":"d2e69fb02ac15ba36ef08ca73d7eeb9323ab7a112505e73f75d2e1a29f59bd2b","sha512":"cf5fcc0e0d2f838d7a8560f65230b5ffffe6b7bc66a5c6729d70e5134eee8ed781d803282a47519a89df62bc47b0deaeadfb5a2835a491f0e148529e90005f3b","ssdeep":"","tlshash":"337143938718d80d3721c236e5b3f0c8c116c01faab57c50f59516ab49e6ef0d1b32ba","dom_hash":"domhashfc028ee1489b8db4f9e64dae2e6e2621","first_seen":"2026-03-05T13:07:53.769449Z","last_seen":"2026-03-30T16:56:15.764347Z","times_seen":25,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bcvvgee.com","fqdn":"bcvvgee.com","domain":"bcvvgee.com","tld":"com"},"ip":{"addr":"43.155.174.32","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"South Korea","country_code":"KR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-27T08:47:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-23","alert":"Hunting_JS_WebAssembly","trigger":"web.telegram.org/a/rlottie-wasm.b8cd14b929a7127811bd.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null},"summary":[{"fqdn":"bcvvgee.com","ip":{"addr":"43.155.174.32","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"South Korea","country_code":"KR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":15258,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"web.telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":10184,"first_seen":"2014-10-23T18:15:32Z","last_seen":"2026-03-18T19:30:34.85787Z","alert_count":4,"request_count":22,"received_data":1017163,"sent_data":10095,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"web.telegram.org/a/6708.361b8790bb09dcdd0973.js","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"d287655f827a0354f814f947a59c0a01","sha1":"d56ede9bbef7428156a7ffe5879bc46185d1b1da","sha256":"a780555d336615962d0ca7700ae2b0cd418b634f7d99585d6caa9ab02f137930","sha512":"f2d3eaf35054c3c73c8af75a485b41738f6cc40e9d0a628e1139a2c9788fc0117ea2f15ceb31603655073df3983fe469479037aa9b898e1791d41412e4e5d66e","ssdeep":"192:OeIKfyWQPKy61/Za7mBP+WiYUpahWqPBdLKM/GtiV0D1UYc1U:xIwyWFy6XtB+XYUshDPBRKMFY1UYc1U","tlshash":"f012d996a131747e62aa84d5e2100b026a36d5587c09a2bdf73c7cfb2d9640a34bcf7c","size":9393,"data":"","first_seen":"2026-03-05T13:07:53.807239Z","last_seen":"2026-03-30T16:56:15.770027Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/redirect.js","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"17773b57b87a678c98e26a7cac72df6c","sha1":"7422857aa75ee81cabcec2eed6c4a6168f363ee1","sha256":"375141f2d3f04c733276dbff5d9208ff36b2db6a64abcee723179ac24797974f","sha512":"28d9e1c2af08154e653e2291db46f4110edbf9f5591192f8d695c8852f9c3c755d69dfb5a032a45f51e0a3fc9417f16c20d0772b1225ca9b85e5531e12fa8bfc","ssdeep":"","tlshash":"e8e07dda0279030417e013f36d82b4709137c2fb604c5d028d984321a1b9b4f5b7b84f","size":325,"data":"","first_seen":"2023-07-27T09:32:34Z","last_seen":"2026-08-01T23:36:13.503192Z","times_seen":11539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/compatTest.js","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"f460d7154f427d10ee377c39b66f48aa","sha1":"1e84aad2bb3e4eeecdd1c62e2a12d1c6d4a159d9","sha256":"727e8544ec0cfa0aa34dc209cf38263e7cca704c5fc211f9b5c4275395c184a6","sha512":"313e3ae62c9641aec509c7774abf05e668343ce1763a5cb8e3db0a86449bd2d942b734cc841ac6ea816e51d7addfe6f5e540fed5c0f5b51dbf510a0b11c59fc7","ssdeep":"","tlshash":"e061162a4cb16171906d5126ef1fb24336298577160ceb7ca220cf397fb185b855fee8","size":3199,"data":"","first_seen":"2026-02-24T12:54:22.569026Z","last_seen":"2026-08-01T23:36:13.486313Z","times_seen":84,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/main.591b17ddb6e56c8911a0.js","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1517c9cee9a7840af585c3070ad456f","sha1":"8675892bab5b837b118939944363022690d87128","sha256":"1ea654a57b597476f5c2d6fb795f6d283635f8740cd4eb9b22377bf92d9d4841","sha512":"8b19bce10e3e9349f39f87fe67a076fa513fb02cb6a70f7ae872698fd5fcbe540f47ceb14d6182ddf3321d5559e6061946645829a784855d33523f677ab4f643","ssdeep":"12288:rgSn5dYhZDItfCg4rKLqbLnaLIqQi66KZM6KdW/QuQjv49Hk+EZm94ekHQVIi15s:/nP2ZEfTJ/Ll","tlshash":"e8b43cd571d674ea63e309e6a4ab0098b7395944380dc4a0f16dfce93d364aaa373f4c","size":539843,"data":"","first_seen":"2026-03-05T13:07:53.781931Z","last_seen":"2026-03-30T16:56:15.76718Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"web.telegram.org/a/rlottie-wasm.b8cd14b929a7127811bd.js","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.telegram.org/a/6805.122c42ed2dab78b484d5.js","date":"2026-03-23T08:47:01.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/rlottie-wasm.b8cd14b929a7127811bd.js HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.telegram.org/a/6805.122c42ed2dab78b484d5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 22 Dec 2025 22:05:21 GMT\r\netag: W/\"6949c0a1-10001\"\r\nexpires: Mon, 23 Mar 2026 09:47:01 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65537,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f9197a18681b7cc4f51b1911286902b0","sha1":"3f585990b02c98c9d787cb74c2a52fdf5d753b98","sha256":"bed5811a3341e35e206eaf3a0518c50edfe50ee9da37480286ac38ff29813c0d","sha512":"9679389c7ae84ee258a31c28e0da91ca3885c491f3e15e544d04c0bbb73c820e03ef8a834d96be0d29305534b18302f2b0110d9361e1d5f34a0fed38912550cd","ssdeep":"768:O6g4cP2yQ6eO0PDlgTdxHzvszXIn2B1ARnv76AeuFYNYjYxRrqhlr3NKR:O1Q6eOyQ5UzXpmK8y1alr8R","tlshash":"2c53e88535d9b0ab42837878946f310bf1ab6d52681c8410db1dd4dabcb4e49e63ffe8","first_seen":"2025-08-04T01:39:06.738468Z","last_seen":"2026-07-03T22:44:54.827943Z","times_seen":185,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-23","alert":"Hunting_JS_WebAssembly","trigger":"web.telegram.org/a/rlottie-wasm.b8cd14b929a7127811bd.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-23T08:46:58.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/ HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bcvvgee.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:46:58 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 05 Mar 2026 11:46:16 GMT\r\netag: W/\"69a96d08-ce0\"\r\nexpires: Mon, 23 Mar 2026 09:46:58 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3296,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (2812)","md5":"be15735022856a04df4921ada628c6c8","sha1":"08825d4f5cc591f3d3e4df710404b480ceaf690b","sha256":"845b3eefa3bc33240480bda55d586abfc8c9fdb9afc3b6519c525a68a3276b21","sha512":"9bdc11f55d73bbd2818fa6d504a446156871e23e404c6ddeac36ee39c175ef0aa51bfe6962f9558bde108b6ac1f25c593d9619e46b8c9e05879d1a19af80b382","ssdeep":"","tlshash":"906131934b28c84e2321863adab3f0c8c116d40fe9b47c50f58516eb4ae5ef4d5b3275","first_seen":"2026-03-05T13:07:53.777788Z","last_seen":"2026-03-30T16:56:15.768918Z","times_seen":25,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":140,"dns":13,"connect":21,"send":0,"wait":21,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/redirect.js","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.telegram.org/a/","date":"2026-03-23T08:46:58.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/redirect.js HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.telegram.org/a/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:46:58 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 325\r\nlast-modified: Mon, 21 Oct 2024 03:28:41 GMT\r\netag: \"6715ca69-145\"\r\nexpires: Mon, 23 Mar 2026 09:46:58 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":325,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"17773b57b87a678c98e26a7cac72df6c","sha1":"7422857aa75ee81cabcec2eed6c4a6168f363ee1","sha256":"375141f2d3f04c733276dbff5d9208ff36b2db6a64abcee723179ac24797974f","sha512":"28d9e1c2af08154e653e2291db46f4110edbf9f5591192f8d695c8852f9c3c755d69dfb5a032a45f51e0a3fc9417f16c20d0772b1225ca9b85e5531e12fa8bfc","ssdeep":"","tlshash":"e8e07dda0279030417e013f36d82b4709137c2fb604c5d028d984321a1b9b4f5b7b84f","first_seen":"2023-07-27T09:32:34Z","last_seen":"2026-08-01T23:36:13.503192Z","times_seen":11539,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/icon-192x192.png","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.telegram.org/a/","date":"2026-03-23T08:46:58.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/icon-192x192.png HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.telegram.org/a/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:46:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 3059\r\nlast-modified: Mon, 21 Oct 2024 03:28:41 GMT\r\netag: \"6715ca69-bf3\"\r\nexpires: Mon, 23 Mar 2026 09:46:58 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3059,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"1a1650d2c76bfc1ac484646c19e495b9","sha1":"fe58d66042ce9241226f5da9370230285ff604fc","sha256":"6e587a62c9d7a97f25265ab5eb29d101ad2e36810042a4116d2dd29da96b0bf8","sha512":"79c5c9278959bc94f66434779bebc1b46c055655f0bc58aa375f179c227e7ac0e52dea196764719d42aadcf98e4fd3b5a4488f2db977edde430aa3df733c03bc","ssdeep":"","tlshash":"bd514cd3253318e8e2dbfd7ace62041f656691ce5638ec120568de720c8985dc070caa","first_seen":"2023-05-16T22:57:55Z","last_seen":"2026-08-05T23:46:15.157816Z","times_seen":16533,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/notification.mp3","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://web.telegram.org/a/","date":"2026-03-23T08:46:58.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/notification.mp3 HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.telegram.org/a/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:46:58 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 10880\r\nlast-modified: Mon, 21 Oct 2024 03:28:41 GMT\r\netag: \"6715ca69-2a80\"\r\nexpires: Mon, 23 Mar 2026 09:46:58 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\ncontent-range: bytes 0-10879/10880\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10880,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"eba09b6a457792c52fc610b5f9f974b3","sha1":"95e6e0f7648e28ea21bc434054ea59aba3a35aea","sha256":"86093551f5a7f68c7dcac947bd8dc54c6a79dd9a5d83f7e40116d640eb28c7d6","sha512":"9dfc5ff830c9ed75c9923528c31e1361fa36500d76a209cd475984e5585a644c8aff1600bf02a658ef363436a51988ff1e63aa7606e541dc4a7b3449c5be4852","ssdeep":"192:RuQQeX7rYX/WUUIk8DLh+2BHpZqlXCYP69tuORf6tVQRa/nwNQBv5JC:RRYeUUEDLk2VClyaV0aZ5g","tlshash":"37226b18af11056ef4866bf0b3939b8dc42d26c37a26d4cdd3a5d7e369430e2a7d500d","first_seen":"2023-05-16T22:57:55Z","last_seen":"2026-08-05T23:46:15.09774Z","times_seen":16892,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/6805.122c42ed2dab78b484d5.js","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.telegram.org/a/","date":"2026-03-23T08:47:01.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/6805.122c42ed2dab78b484d5.js HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.telegram.org/a/\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Mar 2026 11:46:15 GMT\r\netag: W/\"69a96d07-1cb5\"\r\nexpires: Mon, 23 Mar 2026 09:47:01 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7349,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7295)","md5":"7656a1330550a33a5c92d5918440142c","sha1":"4ab41db32fc440c4efe16db8d3549349ccf4fe39","sha256":"ca77ff078741b78d604e9d5111397b96f0bf833c7463e590beb8457aed1d1601","sha512":"6e170851709145915734859060da4546a5af2610fb37c1941da1c7df24c5ea5ebe5e89c2ea9481f0ce439a2e7c02e9fd5a034bbd3562aeb45fcd86c00ea8aeb8","ssdeep":"96:SiW936N68UWhdT7ZqV9aZ+dQupaX976INDgr2Bst41opKWIMAbEzFWbCT960u7J+:SiMq8piPCvDYh6Ej7EYbCT4R9Xbuoq","tlshash":"05e1b4d63752593ee3969dcaad3e1043a0a1d92c39188164772a5ceb3d27dc1e0b2f53","first_seen":"2026-03-05T13:07:53.784783Z","last_seen":"2026-03-30T16:56:15.770545Z","times_seen":28,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/3345.86ef7d5fa6d231350df9.js","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.telegram.org/a/6805.122c42ed2dab78b484d5.js","date":"2026-03-23T08:47:01.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/3345.86ef7d5fa6d231350df9.js HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.telegram.org/a/6805.122c42ed2dab78b484d5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Mar 2026 11:46:15 GMT\r\netag: W/\"69a96d07-b2e\"\r\nexpires: Mon, 23 Mar 2026 09:47:01 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2862,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2808)","md5":"c82fcd023cc92eb737498eb0ac082493","sha1":"264ea08bcf0300c79cb19c7f1c3851fdc3ce052e","sha256":"f4abe2f20e52b200095fb0e37ea7ec1d1048c0c1e3ac70159d6c065e311434c6","sha512":"547f9ff30ac0411a095ef8141713e23e1a9ffd5f5382cacd9f58c2c10fb4af3c10ed899248d7dd3d5fb1fb568d39eb85f80efb2a2f095bbc920a77c5d05890f6","ssdeep":"","tlshash":"05510a482a73387a2c6747abf8573b120d6513b23819f49316199eef8a7724f4b03f49","first_seen":"2026-03-05T13:07:53.773162Z","last_seen":"2026-03-30T16:56:15.765166Z","times_seen":28,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/3345.86ef7d5fa6d231350df9.js","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.telegram.org/a/6805.122c42ed2dab78b484d5.js","date":"2026-03-23T08:47:01.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/3345.86ef7d5fa6d231350df9.js HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.telegram.org/a/6805.122c42ed2dab78b484d5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Mar 2026 11:46:15 GMT\r\netag: W/\"69a96d07-b2e\"\r\nexpires: Mon, 23 Mar 2026 09:47:01 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2862,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2808)","md5":"c82fcd023cc92eb737498eb0ac082493","sha1":"264ea08bcf0300c79cb19c7f1c3851fdc3ce052e","sha256":"f4abe2f20e52b200095fb0e37ea7ec1d1048c0c1e3ac70159d6c065e311434c6","sha512":"547f9ff30ac0411a095ef8141713e23e1a9ffd5f5382cacd9f58c2c10fb4af3c10ed899248d7dd3d5fb1fb568d39eb85f80efb2a2f095bbc920a77c5d05890f6","ssdeep":"","tlshash":"05510a482a73387a2c6747abf8573b120d6513b23819f49316199eef8a7724f4b03f49","first_seen":"2026-03-05T13:07:53.773162Z","last_seen":"2026-03-30T16:56:15.765166Z","times_seen":28,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/compatTest.js","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.telegram.org/a/","date":"2026-03-23T08:46:58.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/compatTest.js HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.telegram.org/a/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:46:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 22 Feb 2026 22:52:57 GMT\r\netag: W/\"699b88c9-c7f\"\r\nexpires: Mon, 23 Mar 2026 09:46:58 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3199,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (413)","md5":"f460d7154f427d10ee377c39b66f48aa","sha1":"1e84aad2bb3e4eeecdd1c62e2a12d1c6d4a159d9","sha256":"727e8544ec0cfa0aa34dc209cf38263e7cca704c5fc211f9b5c4275395c184a6","sha512":"313e3ae62c9641aec509c7774abf05e668343ce1763a5cb8e3db0a86449bd2d942b734cc841ac6ea816e51d7addfe6f5e540fed5c0f5b51dbf510a0b11c59fc7","ssdeep":"","tlshash":"e061162a4cb16171906d5126ef1fb24336298577160ceb7ca220cf397fb185b855fee8","first_seen":"2026-02-24T12:54:22.569026Z","last_seen":"2026-08-01T23:36:13.486313Z","times_seen":84,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/6708.361b8790bb09dcdd0973.js","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.telegram.org/a/","date":"2026-03-23T08:47:01.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/6708.361b8790bb09dcdd0973.js HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.telegram.org/a/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Mar 2026 11:46:15 GMT\r\netag: W/\"69a96d07-24b1\"\r\nexpires: Mon, 23 Mar 2026 09:47:01 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9393,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9339)","md5":"d287655f827a0354f814f947a59c0a01","sha1":"d56ede9bbef7428156a7ffe5879bc46185d1b1da","sha256":"a780555d336615962d0ca7700ae2b0cd418b634f7d99585d6caa9ab02f137930","sha512":"f2d3eaf35054c3c73c8af75a485b41738f6cc40e9d0a628e1139a2c9788fc0117ea2f15ceb31603655073df3983fe469479037aa9b898e1791d41412e4e5d66e","ssdeep":"192:OeIKfyWQPKy61/Za7mBP+WiYUpahWqPBdLKM/GtiV0D1UYc1U:xIwyWFy6XtB+XYUshDPBRKMFY1UYc1U","tlshash":"f012d996a131747e62aa84d5e2100b026a36d5587c09a2bdf73c7cfb2d9640a34bcf7c","first_seen":"2026-03-05T13:07:53.807239Z","last_seen":"2026-03-30T16:56:15.770027Z","times_seen":28,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/6805.122c42ed2dab78b484d5.js","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.telegram.org/a/","date":"2026-03-23T08:47:01.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/6805.122c42ed2dab78b484d5.js HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.telegram.org/a/\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Mar 2026 11:46:15 GMT\r\netag: W/\"69a96d07-1cb5\"\r\nexpires: Mon, 23 Mar 2026 09:47:01 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7349,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7295)","md5":"7656a1330550a33a5c92d5918440142c","sha1":"4ab41db32fc440c4efe16db8d3549349ccf4fe39","sha256":"ca77ff078741b78d604e9d5111397b96f0bf833c7463e590beb8457aed1d1601","sha512":"6e170851709145915734859060da4546a5af2610fb37c1941da1c7df24c5ea5ebe5e89c2ea9481f0ce439a2e7c02e9fd5a034bbd3562aeb45fcd86c00ea8aeb8","ssdeep":"96:SiW936N68UWhdT7ZqV9aZ+dQupaX976INDgr2Bst41opKWIMAbEzFWbCT960u7J+:SiMq8piPCvDYh6Ej7EYbCT4R9Xbuoq","tlshash":"05e1b4d63752593ee3969dcaad3e1043a0a1d92c39188164772a5ceb3d27dc1e0b2f53","first_seen":"2026-03-05T13:07:53.784783Z","last_seen":"2026-03-30T16:56:15.770545Z","times_seen":28,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/6805.122c42ed2dab78b484d5.js","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.telegram.org/a/","date":"2026-03-23T08:47:01.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/6805.122c42ed2dab78b484d5.js HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.telegram.org/a/\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Mar 2026 11:46:15 GMT\r\netag: W/\"69a96d07-1cb5\"\r\nexpires: Mon, 23 Mar 2026 09:47:01 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7349,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7295)","md5":"7656a1330550a33a5c92d5918440142c","sha1":"4ab41db32fc440c4efe16db8d3549349ccf4fe39","sha256":"ca77ff078741b78d604e9d5111397b96f0bf833c7463e590beb8457aed1d1601","sha512":"6e170851709145915734859060da4546a5af2610fb37c1941da1c7df24c5ea5ebe5e89c2ea9481f0ce439a2e7c02e9fd5a034bbd3562aeb45fcd86c00ea8aeb8","ssdeep":"96:SiW936N68UWhdT7ZqV9aZ+dQupaX976INDgr2Bst41opKWIMAbEzFWbCT960u7J+:SiMq8piPCvDYh6Ej7EYbCT4R9Xbuoq","tlshash":"05e1b4d63752593ee3969dcaad3e1043a0a1d92c39188164772a5ceb3d27dc1e0b2f53","first_seen":"2026-03-05T13:07:53.784783Z","last_seen":"2026-03-30T16:56:15.770545Z","times_seen":28,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/6805.122c42ed2dab78b484d5.js","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.telegram.org/a/","date":"2026-03-23T08:47:01.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/6805.122c42ed2dab78b484d5.js HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.telegram.org/a/\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Mar 2026 11:46:15 GMT\r\netag: W/\"69a96d07-1cb5\"\r\nexpires: Mon, 23 Mar 2026 09:47:01 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7349,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7295)","md5":"7656a1330550a33a5c92d5918440142c","sha1":"4ab41db32fc440c4efe16db8d3549349ccf4fe39","sha256":"ca77ff078741b78d604e9d5111397b96f0bf833c7463e590beb8457aed1d1601","sha512":"6e170851709145915734859060da4546a5af2610fb37c1941da1c7df24c5ea5ebe5e89c2ea9481f0ce439a2e7c02e9fd5a034bbd3562aeb45fcd86c00ea8aeb8","ssdeep":"96:SiW936N68UWhdT7ZqV9aZ+dQupaX976INDgr2Bst41opKWIMAbEzFWbCT960u7J+:SiMq8piPCvDYh6Ej7EYbCT4R9Xbuoq","tlshash":"05e1b4d63752593ee3969dcaad3e1043a0a1d92c39188164772a5ceb3d27dc1e0b2f53","first_seen":"2026-03-05T13:07:53.784783Z","last_seen":"2026-03-30T16:56:15.770545Z","times_seen":28,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/3345.86ef7d5fa6d231350df9.js","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.telegram.org/a/6805.122c42ed2dab78b484d5.js","date":"2026-03-23T08:47:01.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/3345.86ef7d5fa6d231350df9.js HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.telegram.org/a/6805.122c42ed2dab78b484d5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Mar 2026 11:46:15 GMT\r\netag: W/\"69a96d07-b2e\"\r\nexpires: Mon, 23 Mar 2026 09:47:01 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2862,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2808)","md5":"c82fcd023cc92eb737498eb0ac082493","sha1":"264ea08bcf0300c79cb19c7f1c3851fdc3ce052e","sha256":"f4abe2f20e52b200095fb0e37ea7ec1d1048c0c1e3ac70159d6c065e311434c6","sha512":"547f9ff30ac0411a095ef8141713e23e1a9ffd5f5382cacd9f58c2c10fb4af3c10ed899248d7dd3d5fb1fb568d39eb85f80efb2a2f095bbc920a77c5d05890f6","ssdeep":"","tlshash":"05510a482a73387a2c6747abf8573b120d6513b23819f49316199eef8a7724f4b03f49","first_seen":"2026-03-05T13:07:53.773162Z","last_seen":"2026-03-30T16:56:15.765166Z","times_seen":28,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/rlottie-wasm.b8cd14b929a7127811bd.js","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.telegram.org/a/6805.122c42ed2dab78b484d5.js","date":"2026-03-23T08:47:01.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/rlottie-wasm.b8cd14b929a7127811bd.js HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.telegram.org/a/6805.122c42ed2dab78b484d5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 22 Dec 2025 22:05:21 GMT\r\netag: W/\"6949c0a1-10001\"\r\nexpires: Mon, 23 Mar 2026 09:47:01 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65537,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f9197a18681b7cc4f51b1911286902b0","sha1":"3f585990b02c98c9d787cb74c2a52fdf5d753b98","sha256":"bed5811a3341e35e206eaf3a0518c50edfe50ee9da37480286ac38ff29813c0d","sha512":"9679389c7ae84ee258a31c28e0da91ca3885c491f3e15e544d04c0bbb73c820e03ef8a834d96be0d29305534b18302f2b0110d9361e1d5f34a0fed38912550cd","ssdeep":"768:O6g4cP2yQ6eO0PDlgTdxHzvszXIn2B1ARnv76AeuFYNYjYxRrqhlr3NKR:O1Q6eOyQ5UzXpmK8y1alr8R","tlshash":"2c53e88535d9b0ab42837878946f310bf1ab6d52681c8410db1dd4dabcb4e49e63ffe8","first_seen":"2025-08-04T01:39:06.738468Z","last_seen":"2026-07-03T22:44:54.827943Z","times_seen":185,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-23","alert":"Hunting_JS_WebAssembly","trigger":"web.telegram.org/a/rlottie-wasm.b8cd14b929a7127811bd.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/rlottie-wasm.b8cd14b929a7127811bd.js","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.telegram.org/a/6805.122c42ed2dab78b484d5.js","date":"2026-03-23T08:47:01.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/rlottie-wasm.b8cd14b929a7127811bd.js HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.telegram.org/a/6805.122c42ed2dab78b484d5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 22 Dec 2025 22:05:21 GMT\r\netag: W/\"6949c0a1-10001\"\r\nexpires: Mon, 23 Mar 2026 09:47:01 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65537,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f9197a18681b7cc4f51b1911286902b0","sha1":"3f585990b02c98c9d787cb74c2a52fdf5d753b98","sha256":"bed5811a3341e35e206eaf3a0518c50edfe50ee9da37480286ac38ff29813c0d","sha512":"9679389c7ae84ee258a31c28e0da91ca3885c491f3e15e544d04c0bbb73c820e03ef8a834d96be0d29305534b18302f2b0110d9361e1d5f34a0fed38912550cd","ssdeep":"768:O6g4cP2yQ6eO0PDlgTdxHzvszXIn2B1ARnv76AeuFYNYjYxRrqhlr3NKR:O1Q6eOyQ5UzXpmK8y1alr8R","tlshash":"2c53e88535d9b0ab42837878946f310bf1ab6d52681c8410db1dd4dabcb4e49e63ffe8","first_seen":"2025-08-04T01:39:06.738468Z","last_seen":"2026-07-03T22:44:54.827943Z","times_seen":185,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-23","alert":"Hunting_JS_WebAssembly","trigger":"web.telegram.org/a/rlottie-wasm.b8cd14b929a7127811bd.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/rlottie-wasm.b8cd14b929a7127811bd.js","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.telegram.org/a/6805.122c42ed2dab78b484d5.js","date":"2026-03-23T08:47:01.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/rlottie-wasm.b8cd14b929a7127811bd.js HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.telegram.org/a/6805.122c42ed2dab78b484d5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 22 Dec 2025 22:05:21 GMT\r\netag: W/\"6949c0a1-10001\"\r\nexpires: Mon, 23 Mar 2026 09:47:01 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65537,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f9197a18681b7cc4f51b1911286902b0","sha1":"3f585990b02c98c9d787cb74c2a52fdf5d753b98","sha256":"bed5811a3341e35e206eaf3a0518c50edfe50ee9da37480286ac38ff29813c0d","sha512":"9679389c7ae84ee258a31c28e0da91ca3885c491f3e15e544d04c0bbb73c820e03ef8a834d96be0d29305534b18302f2b0110d9361e1d5f34a0fed38912550cd","ssdeep":"768:O6g4cP2yQ6eO0PDlgTdxHzvszXIn2B1ARnv76AeuFYNYjYxRrqhlr3NKR:O1Q6eOyQ5UzXpmK8y1alr8R","tlshash":"2c53e88535d9b0ab42837878946f310bf1ab6d52681c8410db1dd4dabcb4e49e63ffe8","first_seen":"2025-08-04T01:39:06.738468Z","last_seen":"2026-07-03T22:44:54.827943Z","times_seen":185,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-03-23","alert":"Hunting_JS_WebAssembly","trigger":"web.telegram.org/a/rlottie-wasm.b8cd14b929a7127811bd.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"bcvvgee.com/","fqdn":"bcvvgee.com","domain":"bcvvgee.com","tld":"com"},"ip":{"addr":"43.155.174.32","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"South Korea","country_code":"KR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-23T08:46:57.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcvvgee.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 07:19:11 GMT","end":"Sun, 21 Jun 2026 07:19:10 GMT"},"fingerprint":{"sha1":"A4:10:63:0E:8E:B5:C1:A4:3D:66:74:7C:5A:E0:A2:9A:87:35:6E:DF","sha256":"7C:1C:5C:46:4D:99:26:26:ED:53:9B:93:6E:98:5F:C2:1B:2F:AA:C7:A2:2A:06:AE:EB:CB:44:DE:13:64:6E:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bcvvgee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 23 Mar 2026 08:46:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 27 Oct 2025 08:26:05 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68ff2c9d-3a85\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":14981,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1757)","md5":"d156f8fbd5f2cd9b69f0419576edc388","sha1":"3ee13a36c7e2e8161cf55b955045c4188e961131","sha256":"66bbb98140af627ac66689b8c0faf6c44507b08adb0b36dcfe65463c85771053","sha512":"44cb65f3c16d64b9feb983c20416438365ff07cee412f71abb0ff7ab8885427b531412a413bda4d07c0fc38b4d9119a08f0e30a919a7db3db4376edc841eb5f8","ssdeep":"192:excGBg05Kc6PqzUQxEGZZx7W+iM5cZyD3bR:1GBH5QPcxEGZv5iM5cyR","tlshash":"95621bb206f08123b543d3b8bfa0b5561e02e18fda97465472ee8fa58fc3dd6c853994","first_seen":"2025-10-27T15:30:11.667436Z","last_seen":"2026-04-09T01:45:16.897771Z","times_seen":65,"resource_available":false,"data":null}},"time_used":1371,"timings":{"blocked":559,"dns":37,"connect":252,"send":0,"wait":254,"receive":0,"ssl":263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/main.591b17ddb6e56c8911a0.js","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.telegram.org/a/","date":"2026-03-23T08:46:58.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/main.591b17ddb6e56c8911a0.js HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.telegram.org/a/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:46:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Mar 2026 11:46:16 GMT\r\netag: W/\"69a96d08-83cca\"\r\nexpires: Mon, 23 Mar 2026 09:46:58 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":539850,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65488), with no line terminators","md5":"c1517c9cee9a7840af585c3070ad456f","sha1":"8675892bab5b837b118939944363022690d87128","sha256":"1ea654a57b597476f5c2d6fb795f6d283635f8740cd4eb9b22377bf92d9d4841","sha512":"8b19bce10e3e9349f39f87fe67a076fa513fb02cb6a70f7ae872698fd5fcbe540f47ceb14d6182ddf3321d5559e6061946645829a784855d33523f677ab4f643","ssdeep":"12288:rgSn5dYhZDItfCg4rKLqbLnaLIqQi66KZM6KdW/QuQjv49Hk+EZm94ekHQVIi15s:/nP2ZEfTJ/Ll","tlshash":"e8b43cd571d674ea63e309e6a4ab0098b7395944380dc4a0f16dfce93d364aaa373f4c","first_seen":"2026-03-05T13:07:53.781931Z","last_seen":"2026-03-30T16:56:15.76718Z","times_seen":28,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/main.5d38a7064fd76f8d01a0.css","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://web.telegram.org/a/","date":"2026-03-23T08:46:58.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/main.5d38a7064fd76f8d01a0.css HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.telegram.org/a/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:46:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Mar 2026 11:46:16 GMT\r\netag: W/\"69a96d08-1f631\"\r\nexpires: Mon, 23 Mar 2026 09:46:58 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":128561,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (12358)","md5":"fe9f02da9c09971f8109d2dd88ffe3e3","sha1":"c38eb5448b1950f11a8fa8eef46b5a7535660864","sha256":"c877cb3630292d19fadee72bdd612f21aec3bbd3d79d823e4362ecee714a8a03","sha512":"c00bc8769fb1ae7da8f08f1f4d55fc0a425d15efc1717361caa293e006b5ee13a9bf891c908dffa46257bf84c9c2c198a1710ab9dcd735af7230dcd1139e8b1a","ssdeep":"1536:wBizdRzJrsPQqsMkhQpRvIU8W+HYOpem5fXwIH:LdlJrsPQ4EQWBd","tlshash":"7cc3e798e94411f9a723c63e97c4e76c8938e481de610faff247615c07cb7ea12d2b58","first_seen":"2026-03-05T13:07:53.794759Z","last_seen":"2026-03-30T16:56:15.767779Z","times_seen":28,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/unsupported.png","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.telegram.org/a/","date":"2026-03-23T08:46:58.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/unsupported.png HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.telegram.org/a/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:46:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 7043\r\nlast-modified: Mon, 21 Oct 2024 03:28:41 GMT\r\netag: \"6715ca69-1b83\"\r\nexpires: Mon, 23 Mar 2026 09:46:58 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7043,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 208 x 208, 8-bit colormap, non-interlaced","md5":"6a1affa3635e8d20ec1c88a598af9011","sha1":"391ac6710a44f3e407fac2583569f992acefda92","sha256":"e9df3445d01b4af59df2721c416013479bfb89134feaf1c61036a848c63857ac","sha512":"9d9fe40b0f5d589af2cbc871140685a1e905b06bd1f78b2520dc1fd46cf40209ebcd7eed86056e8b129967efbfe3459d3173947e3bba064fdbfdad5eb2f84bcb","ssdeep":"192:GIQB1mOm995ipDlrfBtHgHkEW6w3rvFQwJ0J4xBGM:aB4OmIltBt/Z6wz70J4xBP","tlshash":"9ce19fd7d44804c0a64286bac533d4be5667adeeacc65fae739c39c06f5323d41930a5","first_seen":"2024-06-22T14:15:20Z","last_seen":"2026-06-05T22:07:43.664466Z","times_seen":102,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/favicon.svg","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://web.telegram.org/a/","date":"2026-03-23T08:46:58.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/favicon.svg HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.telegram.org/a/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:46:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 892\r\nlast-modified: Mon, 21 Oct 2024 03:28:41 GMT\r\netag: \"6715ca69-37c\"\r\nexpires: Mon, 23 Mar 2026 09:46:58 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":892,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d9ee2d4b0edd9f8ba2fb7242162c2c47","sha1":"398522893cf2cdefb5176f11bc67eab31c2d7382","sha256":"a462f1c5333e16b48335054493cfd1d0a13a96847b4b9ffe2cf24403e6e86010","sha512":"e404678e96fe6f6d1fe6c1390e4a64d90844a2d8903f84f1a34b23137593da5ba04112d9504b8bf480b392b294830a363344c5767e3bb5b7a3cb6f5df2a3aa45","ssdeep":"","tlshash":"97114493d060e71ad4c9e16bef61fca0116720cee5b745d485d95a34500fcdbfc08668","first_seen":"2023-05-09T00:01:39Z","last_seen":"2026-08-05T23:46:14.986618Z","times_seen":15694,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"web.telegram.org/a/3345.86ef7d5fa6d231350df9.js","fqdn":"web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://web.telegram.org/a/6805.122c42ed2dab78b484d5.js","date":"2026-03-23T08:47:01.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /a/3345.86ef7d5fa6d231350df9.js HTTP/1.1\r\nHost: web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://web.telegram.org/a/6805.122c42ed2dab78b484d5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Mar 2026 11:46:15 GMT\r\netag: W/\"69a96d07-b2e\"\r\nexpires: Mon, 23 Mar 2026 09:47:01 GMT\r\ncache-control: max-age=3600\r\nx-frame-options: deny\r\nx-served-by: meta4240124\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2862,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2808)","md5":"c82fcd023cc92eb737498eb0ac082493","sha1":"264ea08bcf0300c79cb19c7f1c3851fdc3ce052e","sha256":"f4abe2f20e52b200095fb0e37ea7ec1d1048c0c1e3ac70159d6c065e311434c6","sha512":"547f9ff30ac0411a095ef8141713e23e1a9ffd5f5382cacd9f58c2c10fb4af3c10ed899248d7dd3d5fb1fb568d39eb85f80efb2a2f095bbc920a77c5d05890f6","ssdeep":"","tlshash":"05510a482a73387a2c6747abf8573b120d6513b23819f49316199eef8a7724f4b03f49","first_seen":"2026-03-05T13:07:53.773162Z","last_seen":"2026-03-30T16:56:15.765166Z","times_seen":28,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}