{"report_id":"d5575db4-067d-444c-8ec0-8812e485f876","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2025-07-19T11:38:45Z","url":{"schema":"http","addr":"chat-group-as-7a8c.vercel.app/","fqdn":"chat-group-as-7a8c.vercel.app","domain":"chat-group-as-7a8c.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"chat-group-as-7a8c.vercel.app/","fqdn":"chat-group-as-7a8c.vercel.app","domain":"chat-group-as-7a8c.vercel.app","tld":"vercel.app"},"title":"WhatsApp"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-08-23T11:38:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"chat-group-as-7a8c.vercel.app","ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-07-19T11:38:45.368905Z","last_seen":"2025-07-19T11:38:45.368905Z","alert_count":2,"request_count":4,"received_data":453945,"sent_data":1904,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"chat-group-as-7a8c.vercel.app/static/js/main.6901c289.js","fqdn":"chat-group-as-7a8c.vercel.app","domain":"chat-group-as-7a8c.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"md5":"d6abfe70142243b9318230295dafd7dd","sha1":"acd2e4aa42e014873c47d748a510a3dcc1c163d6","sha256":"f4def100b6c86b4fc570b1747e55709c6d3d9c74b598771a7b21d91db8b19f18","sha512":"48f7fa4285e184f880cc7c5607820a3702003349aa0f22d66e588526168e8efb9b5d4a4d3fdb8322ad38ec85a50678624daff0671b39e4ab8eb71caf1a17e951","size":417790,"token":"7814338130:AAHm2X9TOwPrcl6jpcY1PTY8Gl5KSeNcIlI","is_revoked":false,"bot":{"token":"7814338130:AAHm2X9TOwPrcl6jpcY1PTY8Gl5KSeNcIlI","user_id":"7814338130","username":"Chatting25bot","first_name":"Bot chat","last_name":"","chat":{"chat_id":"6968763338","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":1}}],"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-07-19","alert":"Detects file containing Telegram Bot API","trigger":"chat-group-as-7a8c.vercel.app/static/js/main.6901c289.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-07-19","alert":"Detects file containing Telegram Bot API","trigger":"javascript.script.md5:d6abfe70142243b9318230295dafd7dd","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}]},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"chat-group-as-7a8c.vercel.app/static/js/main.6901c289.js","fqdn":"chat-group-as-7a8c.vercel.app","domain":"chat-group-as-7a8c.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6abfe70142243b9318230295dafd7dd","sha1":"acd2e4aa42e014873c47d748a510a3dcc1c163d6","sha256":"f4def100b6c86b4fc570b1747e55709c6d3d9c74b598771a7b21d91db8b19f18","sha512":"48f7fa4285e184f880cc7c5607820a3702003349aa0f22d66e588526168e8efb9b5d4a4d3fdb8322ad38ec85a50678624daff0671b39e4ab8eb71caf1a17e951","ssdeep":"6144:c+WJKWVNXnNdBDilBgBtBpMFuwp++2nN+b6Lv:G3dRB/aO","tlshash":"a99439fa3a80f72776b23265846f900fb76c4c16dc4c8064a7e3e8ca6874456617ff69","size":417790,"data":"","first_seen":"2025-07-19T11:38:48.236618Z","last_seen":"2025-07-19T11:38:48.236618Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-07-19","alert":"Detects file containing Telegram Bot API","trigger":"javascript.script.md5:d6abfe70142243b9318230295dafd7dd","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"chat-group-as-7a8c.vercel.app/static/js/main.6901c289.js","fqdn":"chat-group-as-7a8c.vercel.app","domain":"chat-group-as-7a8c.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://chat-group-as-7a8c.vercel.app/","date":"2025-07-19T11:38:23.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /static/js/main.6901c289.js HTTP/1.1\r\nHost: chat-group-as-7a8c.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chat-group-as-7a8c.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: s-maxage=31536000, immutable\r\ncontent-disposition: inline; filename=\"main.6901c289.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 19 Jul 2025 11:38:24 GMT\r\netag: \"d6abfe70142243b9318230295dafd7dd\"\r\nlast-modified: Sat, 19 Jul 2025 11:38:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::djfl7-1752925103846-1e990b545be2\r\ncontent-length: 123055\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":417790,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"d6abfe70142243b9318230295dafd7dd","sha1":"acd2e4aa42e014873c47d748a510a3dcc1c163d6","sha256":"f4def100b6c86b4fc570b1747e55709c6d3d9c74b598771a7b21d91db8b19f18","sha512":"48f7fa4285e184f880cc7c5607820a3702003349aa0f22d66e588526168e8efb9b5d4a4d3fdb8322ad38ec85a50678624daff0671b39e4ab8eb71caf1a17e951","ssdeep":"6144:c+WJKWVNXnNdBDilBgBtBpMFuwp++2nN+b6Lv:G3dRB/aO","tlshash":"a99439fa3a80f72776b23265846f900fb76c4c16dc4c8064a7e3e8ca6874456617ff69","first_seen":"2025-07-19T11:38:48.236618Z","last_seen":"2025-07-19T11:38:48.236618Z","times_seen":1,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-07-19","alert":"Detects file containing Telegram Bot API","trigger":"chat-group-as-7a8c.vercel.app/static/js/main.6901c289.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"chat-group-as-7a8c.vercel.app/static/css/main.ee0e8fee.css","fqdn":"chat-group-as-7a8c.vercel.app","domain":"chat-group-as-7a8c.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://chat-group-as-7a8c.vercel.app/","date":"2025-07-19T11:38:23.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /static/css/main.ee0e8fee.css HTTP/1.1\r\nHost: chat-group-as-7a8c.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chat-group-as-7a8c.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: s-maxage=31536000, immutable\r\ncontent-disposition: inline; filename=\"main.ee0e8fee.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 19 Jul 2025 11:38:24 GMT\r\netag: \"1379443cc8ae75f2338720c2f08f475c\"\r\nlast-modified: Sat, 19 Jul 2025 11:38:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::krwkw-1752925103848-640332053b91\r\ncontent-length: 4757\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17636,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (16658)","md5":"1379443cc8ae75f2338720c2f08f475c","sha1":"9ef93dbbc5f485fe5760b59778e4bb468cb52b59","sha256":"0009beb0f74ff464a2779b99a5c02d20ec1fc3be3b889d1ce3934d8ee8ec94f2","sha512":"ddf944be0c50b19b5707374402e6df05effd5e5bd5cfd7d34486496366b785da736c578fae168e32c86971ecbce32258d8f7ff7607a7d1f8857305ec6e80faaa","ssdeep":"384:PzVf/C3v+jiZsyORM2eA8A908pj/2pLnP2Rg4qSLA8AW4rqbj:LVfxIqn","tlshash":"d782552ebb10023ffd3785f6f7d8e549a10aa4c4ee7fd2d3a852621096c63e20d53658","first_seen":"2025-07-19T11:38:48.237659Z","last_seen":"2025-07-19T11:38:48.237659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-group-as-7a8c.vercel.app/images/favicon.ico","fqdn":"chat-group-as-7a8c.vercel.app","domain":"chat-group-as-7a8c.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://chat-group-as-7a8c.vercel.app/","date":"2025-07-19T11:38:24.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET /images/favicon.ico HTTP/1.1\r\nHost: chat-group-as-7a8c.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chat-group-as-7a8c.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Sat, 19 Jul 2025 11:38:24 GMT\r\netag: \"4e7afdbb92b2cf8dcac805a2cc1d6949\"\r\nlast-modified: Sat, 19 Jul 2025 11:38:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::v98fx-1752925104414-9f1e4d7e6e72\r\ncontent-length: 15089\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15085,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"4e7afdbb92b2cf8dcac805a2cc1d6949","sha1":"cf1d6418e2a46b3283e68ff7a4f95ba590a159b0","sha256":"ce22bf3263585a70bc297e8ca7058eec5dcab5bf7dfa25e0f65c36026c4adf14","sha512":"29b7f9718fbf79f080d0a5747100ab0ec05d72f50a984a579fb13601b233450d45ea58e416bb339e330aa1788533a1e11ea2d6a00b4fc5af03f7d03fe62962f3","ssdeep":"384:vfkID+VoWiE/iSLwSckFmZ067UrVbsymRK9ne8qjyhOCE:vZD+Vfp6Z0BrZsylnOjy5E","tlshash":"9e62d14c77ebed3db0169f821a4f2c1c1f7b9c08981655c1022bef20a5f0a9a4f54fa1","first_seen":"2023-12-21T23:56:20Z","last_seen":"2025-12-25T23:34:37.503778Z","times_seen":19,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat-group-as-7a8c.vercel.app/","fqdn":"chat-group-as-7a8c.vercel.app","domain":"chat-group-as-7a8c.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-19T11:38:23.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Jun 2025 04:57:32 GMT","end":"Mon, 22 Sep 2025 04:57:31 GMT"},"fingerprint":{"sha1":"81:D3:FA:22:93:E5:25:70:85:9A:59:F7:5D:92:C4:FE:CF:35:0D:C7","sha256":"CF:7D:EA:B1:F6:D3:8D:F4:F7:DA:1F:83:F1:44:C8:1D:E2:58:46:A5:3A:AD:9E:5F:79:E0:C3:92:23:CE:2D:B7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: chat-group-as-7a8c.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 19 Jul 2025 11:38:23 GMT\r\netag: \"239b0d6f46d6262a31986f1202d2861f\"\r\nlast-modified: Sat, 19 Jul 2025 11:38:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::v98fx-1752925103154-88158a11dcb9\r\ncontent-length: 546\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1145,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1099), with no line terminators","md5":"239b0d6f46d6262a31986f1202d2861f","sha1":"abd20e73eedc0c0eb247d0505342e0a36fa87263","sha256":"c2f33c180db3e75f06f533d3e4147a91bda4e316f98dee71fbeb655fbe0ad079","sha512":"33fe16678b1c1b8a9b7eabe0f699f3a3fdcf9e689303b6fcc9ea67a3f2087d150c59f66b017368bf7bc89bbe7e5b57abb45e12c52afb2046f0c05a91dbe03466","ssdeep":"","tlshash":"1a21ee53d420c81c1370813a9c43b01cc65cf40fd5a6bca0f6da1adf0ce6ba1c4bb666","first_seen":"2025-07-19T11:38:48.240132Z","last_seen":"2025-07-19T11:38:48.240132Z","times_seen":1,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":58,"dns":4,"connect":1,"send":0,"wait":10,"receive":334,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}