{"report_id":"d75d0ab3-f5be-43a9-95d8-c9b316a38f1a","version":0,"status":"done","tags":[],"date":"2026-07-15T05:50:48Z","url":{"schema":"https","addr":"tg-app.org/","fqdn":"tg-app.org","domain":"tg-app.org","tld":"org"},"ip":{"addr":"104.21.96.88","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tg-app.org/","fqdn":"tg-app.org","domain":"tg-app.org","tld":"org"},"title":"Telegram 电脑版下载","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"tg-app.org/","fqdn":"tg-app.org","domain":"tg-app.org","tld":"org"},"ip":{"addr":"104.21.96.88","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-19T05:50:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"tg-app.org","ip":{"addr":"172.67.176.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-27","domain_rank":0,"first_seen":"2026-07-15T05:44:52.920556Z","last_seen":"2026-07-15T05:44:52.920556Z","alert_count":28,"request_count":14,"received_data":5275393,"sent_data":6783,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tg-app.org/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"tg-app.org","domain":"tg-app.org","tld":"org"},"ip":{"addr":"172.67.176.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f0af023924b28c71b6560fa529f7471","sha1":"72f05f839efa10c7c2166c8fdcb8afcd5e69e3b2","sha256":"f567722e1ff77c8cc64a8084c9ac176773b7c8d7ed8cb676e7f497c670e8e2fa","sha512":"24e9637abf99dc37eb5eb4a859710aea6144600bec6fdcbb622d9067c27edc4a8fa1bd668abd75fdf477f1eef1f004227e05b9a8dda94385a0d95dac48709c2a","ssdeep":"384:fgWkhPT2SgLn/oFDfnCNCLRNTsKjhnOkDUsD612cUUpH71J2l9xNIqjZn6hb+KQ4:fgWkhP7k/oUNCLRNTsKVOkgsD60js1YC","tlshash":"d5a294e67ad2b84d137760b531a7b4cbe12dac4d90055988e120c5e8beb4b5df13fe88","size":22566,"data":"","first_seen":"2026-07-15T05:33:54.914146Z","last_seen":"2026-07-15T05:50:49.918024Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-app.org/Telegram%20for%20Android_files/main.js","fqdn":"tg-app.org","domain":"tg-app.org","tld":"org"},"ip":{"addr":"172.67.176.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"85e262e1bb6fec16a45e01ff13240913","sha1":"47279d342223948ba7b969194ae917662d0c5466","sha256":"e8a7aa6d43218a3928f91c2a933dcd73133724c2447f6dff37852f7447636976","sha512":"8eface0c351bd50f63e24087dc912ee31090fe9c1e7a6eb622c1f13109cf2fed7ef43db46c78abe93fd6e9d67a175e9e640dce35eaa7f9f459975899432b2f76","ssdeep":"384:FCxSBo7bW5dibe4UbBHasovLidmBmLSoGBejIfD5FQhPOwIc:FCxco7qALidMUGFTcIc","tlshash":"22a2626879f33036586b72b96faf9249377400475009df007c2e8a886fa1e7626f6fd4","size":21647,"data":"","first_seen":"2026-07-15T05:44:57.047127Z","last_seen":"2026-07-15T05:55:27.388596Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-app.org/home-nav.js?v=20260713","fqdn":"tg-app.org","domain":"tg-app.org","tld":"org"},"ip":{"addr":"172.67.176.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d61ade69826a9d145348eb06cf61a795","sha1":"74900092f2e8f969b6faa0a875a66175c38a416b","sha256":"726a0ae40ed4d496236dae564b52060ded239c7aebd206e854292bd84fe44577","sha512":"d740377336c049a9edd55a34f160d3726ed619fab6eb6ae1437b5392d42104238af07efcb3e34bfb5c23fea10b9440027327cb5180bf26a60b27b8aaab4a61af","ssdeep":"384:Pud1Ky48ztnpiUcH9xWb7eHPsZ+8Mk4heIVh/LsDpK0dMdUKZrewnQzLsHDCrPqW:Pud1K/K3RkuycoJ7xb5R5fE/i4jPxJJ","tlshash":"96d2d8db1bf5f0ab512452a77344bb07dab5c23f62906243367c493b1fb2a1046ade8d","size":29336,"data":"","first_seen":"2026-07-15T05:44:57.039736Z","last_seen":"2026-07-15T05:55:27.400592Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tg-app.org/lang-switch.js?v=20260717","fqdn":"tg-app.org","domain":"tg-app.org","tld":"org"},"ip":{"addr":"172.67.176.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c413cf0e5df9c873d715e5724aa952b4","sha1":"3aa3042396303f234fb89053c59cc64d3b185b59","sha256":"a14f5358503713a70e62fd4d9547b6d87ab714ddd52374a5cccb16e915e5c23c","sha512":"05c15651ed66f536984bf6495cbf9392ecd3e919597479858149d0610ee2418641cde2dc7ef9614def5f22c2650dbe7ca941cc1d456b5730b99f3f9ecf5f5b15","ssdeep":"192:5w/TdBYMDaCzzfNeT4cK2d6XD7I2lrbfxjo+dBWHsZ6AILEXPAlqhXUmn4qceUNh:56TdSMZhor2RNN1doMvIAhEm5Iz5","tlshash":"5082a6cf1a9a826e360322736415b2055ebfc07b3100f5613e6d0d3f6b6a43599bf9a7","size":18705,"data":"","first_seen":"2026-07-15T05:44:57.038904Z","last_seen":"2026-07-15T05:55:27.396973Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a39d7db842983fbe4894787236b645c","sha1":"1da32fc78c9ef0be965f4bb900b6b38cf4bdaa8d","sha256":"0c9a9722f45ce4a42a3df9c358a0bcbdca1bc6cedaeac9dd9c50d19ebc560f7a","sha512":"5fbae1ee9c433c8d15c0dfc21e67724a17daed530f55f14157faa02ca81bafc38b4d5de38da64482cabaa12fec6cef9d06c80af3ea3b8ec19f7f4d48cc4c2f3f","ssdeep":"","tlshash":"93d023b71d7584307de4024b70b5d3a42771709067117344d1cccc7b5e20dd304f1559","size":217,"data":"","first_seen":"2026-07-15T05:50:49.926233Z","last_seen":"2026-07-15T05:50:49.926233Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tg-app.org/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"tg-app.org","domain":"tg-app.org","tld":"org"},"ip":{"addr":"172.67.176.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tg-app.org/","date":"2026-07-15T05:50:13.821Z","timestamp":1784094613821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tg-app.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 00:39:08 GMT","end":"Mon, 24 Aug 2026 01:33:34 GMT"},"fingerprint":{"sha1":"E4:D2:54:CE:06:FD:10:AD:88:44:53:BB:C0:AF:63:AC:A3:1A:FD:B2","sha256":"2F:87:DC:58:27:DA:44:74:11:AE:B9:CD:62:3A:CF:C7:BB:6D:92:2C:CB:D1:1F:A9:13:97:04:2D:71:8B:23:DD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: tg-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/3104729c556c/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nserver-timing: cfExtPri\r\ndate: Wed, 15 Jul 2026 05:50:13 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a1b67d086a5e5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T09:18:40.566653Z","times_seen":17261326,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-app.org/cdn-cgi/challenge-platform/h/b/scripts/jsd/3104729c556c/main.js?","fqdn":"tg-app.org","domain":"tg-app.org","tld":"org"},"ip":{"addr":"172.67.176.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tg-app.org/","date":"2026-07-15T05:50:13.872Z","timestamp":1784094613872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tg-app.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 00:39:08 GMT","end":"Mon, 24 Aug 2026 01:33:34 GMT"},"fingerprint":{"sha1":"E4:D2:54:CE:06:FD:10:AD:88:44:53:BB:C0:AF:63:AC:A3:1A:FD:B2","sha256":"2F:87:DC:58:27:DA:44:74:11:AE:B9:CD:62:3A:CF:C7:BB:6D:92:2C:CB:D1:1F:A9:13:97:04:2D:71:8B:23:DD"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/3104729c556c/main.js? HTTP/1.1\r\nHost: tg-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Wed, 15 Jul 2026 05:50:13 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a1b67d08ba665ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22566,"size_decoded":10611,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (22566), with no line terminators","md5":"0f0af023924b28c71b6560fa529f7471","sha1":"72f05f839efa10c7c2166c8fdcb8afcd5e69e3b2","sha256":"f567722e1ff77c8cc64a8084c9ac176773b7c8d7ed8cb676e7f497c670e8e2fa","sha512":"24e9637abf99dc37eb5eb4a859710aea6144600bec6fdcbb622d9067c27edc4a8fa1bd668abd75fdf477f1eef1f004227e05b9a8dda94385a0d95dac48709c2a","ssdeep":"384:fgWkhPT2SgLn/oFDfnCNCLRNTsKjhnOkDUsD612cUUpH71J2l9xNIqjZn6hb+KQ4:fgWkhP7k/oUNCLRNTsKVOkgsD60js1YC","tlshash":"d5a294e67ad2b84d137760b531a7b4cbe12dac4d90055988e120c5e8beb4b5df13fe88","first_seen":"2026-07-15T05:33:54.914146Z","last_seen":"2026-07-15T05:50:49.918024Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-app.org/","fqdn":"tg-app.org","domain":"tg-app.org","tld":"org"},"ip":{"addr":"172.67.176.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-15T05:50:12.788Z","timestamp":1784094612788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tg-app.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 00:39:08 GMT","end":"Mon, 24 Aug 2026 01:33:34 GMT"},"fingerprint":{"sha1":"E4:D2:54:CE:06:FD:10:AD:88:44:53:BB:C0:AF:63:AC:A3:1A:FD:B2","sha256":"2F:87:DC:58:27:DA:44:74:11:AE:B9:CD:62:3A:CF:C7:BB:6D:92:2C:CB:D1:1F:A9:13:97:04:2D:71:8B:23:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tg-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 05:50:13 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 14 Jul 2026 17:28:41 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TvnZxYemM1w7%2FGbtlOJLGamb%2BLqO9rr7iU9ifG24C615iclCtXwO%2BlvMojVqNaP1oppZtMPGtmEHh%2Br%2FBqZW0ayyZJNZLRRRgi0wCjFjHge0yWJehDpHRTXBnLDX\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1b67d0249995ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34884,"size_decoded":11803,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2608)","md5":"3b3291bf2e73b28a6d2ffce776241039","sha1":"6f49fae3bb71cbe3bd2ffe6333fc4d0ff7f75f4f","sha256":"c0e7292a88cd1cf718b83ce322b0199bafd5f6af67c6b17743a1c7e63c874af9","sha512":"d580b7c1f4c6714abc58f71faa3aa146f74c47e3b7545f6a25c6e21f5fd12d86ac6290f08e301c4966e732599754123b94323eb3f835c1c5dedaaddcd21b8d5a","ssdeep":"768:YnCk5ngncn30n53W5JnzCrsbpZjjDPJlISwWlrGiF9YwFx/W:GCUOy3KwDzCrslZHDxy+lrhx/W","tlshash":"56f2eaee2fa3d011261311bb6faef2056176d0076525ec00ba5c492f7fc8f6584bbad6","first_seen":"2026-07-15T05:50:49.919075Z","last_seen":"2026-07-15T05:50:49.919075Z","times_seen":1,"resource_available":true,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":41,"connect":14,"send":0,"wait":577,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-app.org/Telegram%20for%20Android_files/bootstrap.min.css","fqdn":"tg-app.org","domain":"tg-app.org","tld":"org"},"ip":{"addr":"172.67.176.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tg-app.org/","date":"2026-07-15T05:50:13.643Z","timestamp":1784094613643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tg-app.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 00:39:08 GMT","end":"Mon, 24 Aug 2026 01:33:34 GMT"},"fingerprint":{"sha1":"E4:D2:54:CE:06:FD:10:AD:88:44:53:BB:C0:AF:63:AC:A3:1A:FD:B2","sha256":"2F:87:DC:58:27:DA:44:74:11:AE:B9:CD:62:3A:CF:C7:BB:6D:92:2C:CB:D1:1F:A9:13:97:04:2D:71:8B:23:DD"}}},"request":{"raw":"GET /Telegram%20for%20Android_files/bootstrap.min.css HTTP/1.1\r\nHost: tg-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tg-app.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 05:50:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Jul 2026 12:12:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a48f8c3-a61b\"\r\nexpires: Wed, 15 Jul 2026 17:44:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 349\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9JVDjEGbu3jKtNmDfvp4mixWd%2BTgl8LUvtPZTPoNOOnP7ZpwZCEKTpGErqp%2FxD3pQPnKD4OVMafEoGykc2G2dcAHRV2IEeZDuy%2BodSbTEXhqPUEvUPWjLshcs6B3\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1b67d074a425ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42523,"size_decoded":8915,"mime_type":"text/css","magic":"ASCII text, with very long lines (42164)","md5":"c2656e265ef58a9cc9f4b70b15da5fb9","sha1":"85c5ebdb89d4574d72688c2650d4b84b9b09770a","sha256":"f1d083ffaa644c708f11db29707aa57c19246e6d32643b03fee3f82c17b224b3","sha512":"6417aadebeef4ee35381bfc7034148d57fd061d84de9974d798468c6426c24a6bd1c9913cf517accf3e349fa06cbdd546d2883ea8391c595285fe0c6127e26e8","ssdeep":"384:6RvBBVkrJxvcwYBUQ7X85AUfvDUNeFUBOgBmjeYP4PSvSdlb1bGjpXJNNRyIrOM:2k0p38OBmjeYP4xb1bG/bRyIH","tlshash":"6313c811f36031aa2167c61c65d4aad63f256120da8e0fbbf93376e88b8d6c91373f05","first_seen":"2023-04-07T00:00:47Z","last_seen":"2026-07-15T07:56:12.891572Z","times_seen":68059,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-app.org/Telegram%20for%20Android_files/main.js","fqdn":"tg-app.org","domain":"tg-app.org","tld":"org"},"ip":{"addr":"172.67.176.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tg-app.org/","date":"2026-07-15T05:50:13.647Z","timestamp":1784094613647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tg-app.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 00:39:08 GMT","end":"Mon, 24 Aug 2026 01:33:34 GMT"},"fingerprint":{"sha1":"E4:D2:54:CE:06:FD:10:AD:88:44:53:BB:C0:AF:63:AC:A3:1A:FD:B2","sha256":"2F:87:DC:58:27:DA:44:74:11:AE:B9:CD:62:3A:CF:C7:BB:6D:92:2C:CB:D1:1F:A9:13:97:04:2D:71:8B:23:DD"}}},"request":{"raw":"GET /Telegram%20for%20Android_files/main.js HTTP/1.1\r\nHost: tg-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tg-app.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 05:50:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Jul 2026 12:12:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a48f8c3-548f\"\r\nexpires: Wed, 15 Jul 2026 17:44:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 349\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zrDdFiudoHIMtJh9uZGIf0jun8krMuu1ptaq9PAMKFWM19kX%2BoS2XSZ2NAqroOWmBASqZl59Z66LoxeWPFO%2FHYkgJt0VrtRxpaQUilAkHV7M0EnyiuFQEv%2B50nuO\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1b67d074a455ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21647,"size_decoded":6761,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"85e262e1bb6fec16a45e01ff13240913","sha1":"47279d342223948ba7b969194ae917662d0c5466","sha256":"e8a7aa6d43218a3928f91c2a933dcd73133724c2447f6dff37852f7447636976","sha512":"8eface0c351bd50f63e24087dc912ee31090fe9c1e7a6eb622c1f13109cf2fed7ef43db46c78abe93fd6e9d67a175e9e640dce35eaa7f9f459975899432b2f76","ssdeep":"384:FCxSBo7bW5dibe4UbBHasovLidmBmLSoGBejIfD5FQhPOwIc:FCxco7qALidMUGFTcIc","tlshash":"22a2626879f33036586b72b96faf9249377400475009df007c2e8a886fa1e7626f6fd4","first_seen":"2026-07-15T05:44:57.047127Z","last_seen":"2026-07-15T05:55:27.388596Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-app.org/Telegram%20for%20Android_files/tdirect.jpg","fqdn":"tg-app.org","domain":"tg-app.org","tld":"org"},"ip":{"addr":"172.67.176.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tg-app.org/","date":"2026-07-15T05:50:13.656Z","timestamp":1784094613656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tg-app.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 00:39:08 GMT","end":"Mon, 24 Aug 2026 01:33:34 GMT"},"fingerprint":{"sha1":"E4:D2:54:CE:06:FD:10:AD:88:44:53:BB:C0:AF:63:AC:A3:1A:FD:B2","sha256":"2F:87:DC:58:27:DA:44:74:11:AE:B9:CD:62:3A:CF:C7:BB:6D:92:2C:CB:D1:1F:A9:13:97:04:2D:71:8B:23:DD"}}},"request":{"raw":"GET /Telegram%20for%20Android_files/tdirect.jpg HTTP/1.1\r\nHost: tg-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tg-app.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 05:50:13 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 04 Jul 2026 12:12:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a48f8c3-86b4\"\r\nexpires: Fri, 14 Aug 2026 05:44:24 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 349\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GFOMmqTvE4GclCT%2BfW%2Fx02w7W%2B6HR2WthqXx7ZGofUvDNKK%2BvYWnvoPsN71KirEiHA0BljlI1dmsxsKNVXL8LugMMDMPjscC4bp%2Fd3HsG7CszyUFU1fpPBH1bjxS\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1b67d075a495ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34484,"size_decoded":33157,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], progressive, precision 8, 300x360, components 3","md5":"e09e246f81288e4d1072437e81adb6ef","sha1":"026bb1982804492140a5a0c80d10f1bdae18b75f","sha256":"c92f7e521a8d016c09d6f650d8a017a83ea3a066dcf078d0f66b827197c15c44","sha512":"0b78b98f8a530e169e906a392debd7053a07cb4c7a1b6ba79e21c266b9bfe9cf0c72cc4bdb7afd69e765c362ae4209d8feed6afb82480864e022edd0152b14f1","ssdeep":"768:8zZNeb/7yAtaEZmmtebZ0OUlMsGnZXABkFGh4fbZawNreZJ:OZN+/7yARZmGW0bfGZqkFGhSMwNreL","tlshash":"eff2e1282bcd972c570a0715a276527c9182792d6ef13bfcbc7e7d516fc84a2ce2142a","first_seen":"2023-08-01T22:02:56Z","last_seen":"2026-07-15T05:55:27.390557Z","times_seen":21,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-app.org/api/track.php","fqdn":"tg-app.org","domain":"tg-app.org","tld":"org"},"ip":{"addr":"172.67.176.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tg-app.org/","date":"2026-07-15T05:50:13.835Z","timestamp":1784094613835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tg-app.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 00:39:08 GMT","end":"Mon, 24 Aug 2026 01:33:34 GMT"},"fingerprint":{"sha1":"E4:D2:54:CE:06:FD:10:AD:88:44:53:BB:C0:AF:63:AC:A3:1A:FD:B2","sha256":"2F:87:DC:58:27:DA:44:74:11:AE:B9:CD:62:3A:CF:C7:BB:6D:92:2C:CB:D1:1F:A9:13:97:04:2D:71:8B:23:DD"}}},"request":{"raw":"POST /api/track.php HTTP/1.1\r\nHost: tg-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://tg-app.org/\r\nContent-Length: 35\r\nOrigin: https://tg-app.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":35,"data":"{\"type\":\"pageview\",\"platform\":\"pc\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 05:50:14 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ihySFaGYfmnjeuvpRxNBpi0w9lBlZPpDz3tOI%2BU1zwp%2BhbhlNr1Myy4pIPYzJ4x5NRmrOvd5Hej7akUcjwcIurZVR7iWzgv3C%2B%2FAAbgIypNTb%2BY6CkaXkFsI%2BJ3w\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1b67d087a635ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":840,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9e36962f5b66ff21ac85ff0013f15eba","sha1":"0d55e659585ddd362fff0b38b4a820b95ac07168","sha256":"432853ee40cabacc7bd38de6d3eb092a4a4f6c67091fd4c81287d9c401338796","sha512":"938517782633d47aa227e08076df9cb804d8cc2f9fffe1c9a6806b1ebc72ae5c2613152ec4302e085342f9145ffeb15005fbd77b39c09ff97611d1b28764d55a","ssdeep":"","tlshash":"4f900403cc174574d10c01003dd07ff45435303355441004107d3074533c00d1513547","first_seen":"2026-07-15T05:50:49.921798Z","last_seen":"2026-07-15T05:55:27.39257Z","times_seen":2,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-app.org/Telegram%20for%20Android_files/telegram.css","fqdn":"tg-app.org","domain":"tg-app.org","tld":"org"},"ip":{"addr":"172.67.176.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tg-app.org/","date":"2026-07-15T05:50:13.645Z","timestamp":1784094613645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tg-app.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 00:39:08 GMT","end":"Mon, 24 Aug 2026 01:33:34 GMT"},"fingerprint":{"sha1":"E4:D2:54:CE:06:FD:10:AD:88:44:53:BB:C0:AF:63:AC:A3:1A:FD:B2","sha256":"2F:87:DC:58:27:DA:44:74:11:AE:B9:CD:62:3A:CF:C7:BB:6D:92:2C:CB:D1:1F:A9:13:97:04:2D:71:8B:23:DD"}}},"request":{"raw":"GET /Telegram%20for%20Android_files/telegram.css HTTP/1.1\r\nHost: tg-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tg-app.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 05:50:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 04 Jul 2026 12:12:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a48f8c6-1daba\"\r\nexpires: Wed, 15 Jul 2026 17:44:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 349\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2Buaw0pGagQ2A4A4D6MmB7hpVHTcrO5Pk8iFiCk9IgvHQQT8XIdSiq7t2yGvCGp2CVmwE5B8JEFUA4NRUrVX9Vn37BPryc%2BDAcd2Fx1H7Wwf0WcrI1HQ7Rrx5k%2Fp\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1b67d074a445ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121530,"size_decoded":25019,"mime_type":"text/css","magic":"ASCII text, with very long lines (1267)","md5":"5a6a9176a9daf1b34300ab3cff1e558e","sha1":"c3ee7f935e94b18298e68bd47b49d5082e2c7013","sha256":"30e6c056b0b2e4d9f4d27148c46038fde6d01f8b8290d7ece77c314051ab6b5c","sha512":"3be5fce4f8a3d6615f315eea5dafe90dc97a8ba4847a9417502a03f14aed6923e2807bc75b70d647b775224ecb9e957bad5929b413f2769e0c66d4ee0b3f4cd7","ssdeep":"1536:cylcEDxYzbJ3iw9vBC2WXdm791WoDYzghw5uJuh0JlNpfewltog69FjxWDp5xm6N:cylcYxYzwwqrXkC0Yz4gL5u","tlshash":"17c382db9bb59608742b80687ea35b42337d8003a54ece7dabb1346cefc5ad48173749","first_seen":"2026-07-15T05:44:57.031222Z","last_seen":"2026-07-15T05:55:27.396077Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-app.org/lang-switch.js?v=20260717","fqdn":"tg-app.org","domain":"tg-app.org","tld":"org"},"ip":{"addr":"172.67.176.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tg-app.org/","date":"2026-07-15T05:50:13.648Z","timestamp":1784094613648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tg-app.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 00:39:08 GMT","end":"Mon, 24 Aug 2026 01:33:34 GMT"},"fingerprint":{"sha1":"E4:D2:54:CE:06:FD:10:AD:88:44:53:BB:C0:AF:63:AC:A3:1A:FD:B2","sha256":"2F:87:DC:58:27:DA:44:74:11:AE:B9:CD:62:3A:CF:C7:BB:6D:92:2C:CB:D1:1F:A9:13:97:04:2D:71:8B:23:DD"}}},"request":{"raw":"GET /lang-switch.js?v=20260717 HTTP/1.1\r\nHost: tg-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tg-app.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 05:50:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Jul 2026 17:28:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5671c9-4911\"\r\nexpires: Wed, 15 Jul 2026 17:44:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 349\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Jdder7kr6YSirHvD4v%2FPt%2BLdoReohZz9j6YOMhs58qNTmO4TLkj53lwX%2FTFoCidMIhqTv6EGzShUJcv9lwBoJNK%2Fs%2FmAAkhwZ5a%2Bgkbs7PtStPI3ar3WyfF0WUU\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1b67d074a465ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18705,"size_decoded":7514,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (659)","md5":"c413cf0e5df9c873d715e5724aa952b4","sha1":"3aa3042396303f234fb89053c59cc64d3b185b59","sha256":"a14f5358503713a70e62fd4d9547b6d87ab714ddd52374a5cccb16e915e5c23c","sha512":"05c15651ed66f536984bf6495cbf9392ecd3e919597479858149d0610ee2418641cde2dc7ef9614def5f22c2650dbe7ca941cc1d456b5730b99f3f9ecf5f5b15","ssdeep":"192:5w/TdBYMDaCzzfNeT4cK2d6XD7I2lrbfxjo+dBWHsZ6AILEXPAlqhXUmn4qceUNh:56TdSMZhor2RNN1doMvIAhEm5Iz5","tlshash":"5082a6cf1a9a826e360322736415b2055ebfc07b3100f5613e6d0d3f6b6a43599bf9a7","first_seen":"2026-07-15T05:44:57.038904Z","last_seen":"2026-07-15T05:55:27.396973Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-app.org/home-nav.js?v=20260713","fqdn":"tg-app.org","domain":"tg-app.org","tld":"org"},"ip":{"addr":"172.67.176.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tg-app.org/","date":"2026-07-15T05:50:13.650Z","timestamp":1784094613650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tg-app.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 00:39:08 GMT","end":"Mon, 24 Aug 2026 01:33:34 GMT"},"fingerprint":{"sha1":"E4:D2:54:CE:06:FD:10:AD:88:44:53:BB:C0:AF:63:AC:A3:1A:FD:B2","sha256":"2F:87:DC:58:27:DA:44:74:11:AE:B9:CD:62:3A:CF:C7:BB:6D:92:2C:CB:D1:1F:A9:13:97:04:2D:71:8B:23:DD"}}},"request":{"raw":"GET /home-nav.js?v=20260713 HTTP/1.1\r\nHost: tg-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tg-app.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 05:50:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 12 Jul 2026 10:17:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5369b2-7648\"\r\nexpires: Wed, 15 Jul 2026 17:44:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 349\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cv3UazmiQwuB%2FdJooFq1DqSmP9hsNigLX7eDbVw6%2FGMTq9mnEWHMO2L7zgdlkdks0bWIbL1D62LFZLEjiAAE1kTpcLU5SPqVtvxeq1sUOt2wG192FoPuse0UPtMK\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1b67d074a475ebd-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30280,"size_decoded":11697,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"d61ade69826a9d145348eb06cf61a795","sha1":"74900092f2e8f969b6faa0a875a66175c38a416b","sha256":"726a0ae40ed4d496236dae564b52060ded239c7aebd206e854292bd84fe44577","sha512":"d740377336c049a9edd55a34f160d3726ed619fab6eb6ae1437b5392d42104238af07efcb3e34bfb5c23fea10b9440027327cb5180bf26a60b27b8aaab4a61af","ssdeep":"384:Pud1Ky48ztnpiUcH9xWb7eHPsZ+8Mk4heIVh/LsDpK0dMdUKZrewnQzLsHDCrPqW:Pud1K/K3RkuycoJ7xb5R5fE/i4jPxJJ","tlshash":"96d2d8db1bf5f0ab512452a77344bb07dab5c23f62906243367c493b1fb2a1046ade8d","first_seen":"2026-07-15T05:44:57.039736Z","last_seen":"2026-07-15T05:55:27.400592Z","times_seen":3,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-app.org/favicon.svg","fqdn":"tg-app.org","domain":"tg-app.org","tld":"org"},"ip":{"addr":"172.67.176.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tg-app.org/","date":"2026-07-15T05:50:13.890Z","timestamp":1784094613890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tg-app.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 00:39:08 GMT","end":"Mon, 24 Aug 2026 01:33:34 GMT"},"fingerprint":{"sha1":"E4:D2:54:CE:06:FD:10:AD:88:44:53:BB:C0:AF:63:AC:A3:1A:FD:B2","sha256":"2F:87:DC:58:27:DA:44:74:11:AE:B9:CD:62:3A:CF:C7:BB:6D:92:2C:CB:D1:1F:A9:13:97:04:2D:71:8B:23:DD"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: tg-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tg-app.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 05:50:14 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=pHU7W8m2_mAMhy4b0KL27qm1KlKrZ.Fs_DO4tLwXH3U-1784094613.8899446-1.0.1.1-1JOCdaAywwI8fUC6Lb1y39swfu3iX2aM8BJDeau4BO3dRmCwqAY0ZNbzuj_S4jKibdo9Jqn64cXGDSyl1Giq31M_Wi8lHinLWbsBSQ_q9_KEr7KHl6NwTbrXEZniO073SOr9kg9vtrw.yok08JZrztyk_M0XdUEis2ViCF6z_K8; report-to cf-csp-endpoint\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cb8zHiBgtUDPdjDOAfW4fzM6LxwbOWjYZaWZOpdWeIyzsiAhnqcpSUQGvzwDIGO1S7SP55jtYVeNbmV57jLlqvw9qOnPH38TZcIUrLXORf29V0bIIJGSDceN1xRw\"}]}, {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=pHU7W8m2_mAMhy4b0KL27qm1KlKrZ.Fs_DO4tLwXH3U-1784094613.8899446-1.0.1.1-1JOCdaAywwI8fUC6Lb1y39swfu3iX2aM8BJDeau4BO3dRmCwqAY0ZNbzuj_S4jKibdo9Jqn64cXGDSyl1Giq31M_Wi8lHinLWbsBSQ_q9_KEr7KHl6NwTbrXEZniO073SOr9kg9vtrw.yok08JZrztyk_M0XdUEis2ViCF6z_K8\"}]}\r\ncf-ray: a1b67d08ca695ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":479,"size_decoded":1790,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"57dd7bfa6c07bfe5eeada45d4bdd78ec","sha1":"395c6ad5c3ae0e8ea47281f5007c369551b32ad7","sha256":"c870990950ca5802e260be6786d1e6a148b1acdfeed4fa9bb6acce744488c0b5","sha512":"c455d00381bde372d6016e7b01eb8682dcbc2fbb032ef522f01f0ea1cd85abeb962aeb8de621b49b138b614b14285686a2c432b4214630f23fda2ed19bf4b9d6","ssdeep":"","tlshash":"27f0dc93d243040e220c45702fb2702450877ddbcb9a0d028897e1bfccd5a698363bad","first_seen":"2023-04-28T05:56:14Z","last_seen":"2026-07-15T07:50:49.003905Z","times_seen":3614,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-app.org/cdn-cgi/challenge-platform/h/b/jsd/oneshot/3104729c556c/0.8789594097242354:1784091620:OayCew4M5etAAWqw3shtK-ILTxi11tQdQcUjHgVco9E/a1b67d0249995ebd","fqdn":"tg-app.org","domain":"tg-app.org","tld":"org"},"ip":{"addr":"172.67.176.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tg-app.org/","date":"2026-07-15T05:50:13.975Z","timestamp":1784094613975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tg-app.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 00:39:08 GMT","end":"Mon, 24 Aug 2026 01:33:34 GMT"},"fingerprint":{"sha1":"E4:D2:54:CE:06:FD:10:AD:88:44:53:BB:C0:AF:63:AC:A3:1A:FD:B2","sha256":"2F:87:DC:58:27:DA:44:74:11:AE:B9:CD:62:3A:CF:C7:BB:6D:92:2C:CB:D1:1F:A9:13:97:04:2D:71:8B:23:DD"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/3104729c556c/0.8789594097242354:1784091620:OayCew4M5etAAWqw3shtK-ILTxi11tQdQcUjHgVco9E/a1b67d0249995ebd HTTP/1.1\r\nHost: tg-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13827\r\nOrigin: https://tg-app.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tg-app.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13827,"data":"qL1PuXd+lS8$t48PL-AoF5bQV1hp+Pns-0D+88Z6TAR1ELcISmZtX2ASoVkACRdpYSFxKEbc7elq1+jVxmhIo2iTEGyics-eGxyXltxX8EdgBOObPvWQApVl8X6DfjAChru6f8ENv-bJEqbkgFwK+2LAL3rMcyAkw6oVPzd9xQmKNKgaojB3RTIKqr1gTrx05HqEu7wuEV+vfqRK4cy0$DBpSMBVQAMbgMn-kHqmCNVqCM-fSJJv7T7V5gRH3IFnrk54Xsf+mIFAuN61iXnezWwmAJBIEss58lKA2Cfw0$Sxo8Wt3l0pwHCqQtEMiDA2kDgFlkxPMs9YpMEcJmMEhAblONIJ$nd3abqhcESMi$WcwukbfqFPJhXu5vB3zOas5MbnPNJfc$JTyqnYpz6qvznZ9geGZMK62a0R9AB-BGaMVWTYZFLFv8jI+93E677y1DOIaSuDBvWNudCcRoTpABoTHegkpnnIZz4CeKXN905-V4O83kXTtIqAQIFWe7A2ZOSzuItvBydiHZd-bL1K8FLZdPGuABdjsC8pO+oAKW$ryeFRBTZ-jgMr6+heu5Yuc2hOzHNx7P9NZa8$FZ7QiOR+KHN0wZ0creSYuKoaDfOmaNe$aXw9DLGDXWy0enGG5gskOboFgjVBkEPL3AM+DQA3Ww8C82EudX6FIloKXMoKybR+eMTe7pVXdXfjTA2hVLLVNiF6zOEa-H9W43Io$VIHblXA+5VvhrGDbXgsCFfn$1+W0sRvBELaWzxwBNBJEsOE1rA868z-n53kqX37e32ZOKhmd03M6478c-OQ$X+7iSWY0Lm+hRR8dozw7ZCo8eR4r8RYNO8XQaSTD7+mupd+Iu23Ep806JVYtRlXmYk5Rb1ETu37Tzfpcze3l0iw5ZpVoL0xHYffuObtVZa986Sm+tElSiZz2VgqdQQGHa1xNh9+60lBu4b9eEqXa80CXl0++LO4ucuMqeX+01bN5uMnAPZDsq6PF2Iwjdi-0N72tL8T62nqE-ZWHyE8QDM06-ZlV4t+b7gd0pQSL8tWzLCEJfanhIFkDW6J8iZIi3TVB4g-VX8RTG$GHZYDsKz8IcsMBcQC3qxbRhPvrXkMp8TONGKXt4IECQ47B3onEk2-2-MxSP2$PsEXQ6bFJ1cjC2WLIg7gJRA-LQwIixMteAHq1b8G+IlJ54u2+-QmoAvkf57SoinVwCz48wKuEBsHf39WAeseqvtHryRJhMruKuw9IAS3sOK8$9YySpXSGfR4GBMfwAMS7Wq9u5A4lCz-bRcK-42TyZLxRRVms-c25ZAr4+HitzKnwhzYvLagqd1i-0j9KiwpBmxXv4rGXZedG9jpToEokMPoWTgW9BM0rOgW2wP1D0VdF5ObDiPO03bHAQgLtw4fF7WBRHL+827oIajyx9gBvQCbua4mGrcD7YbW+CXTdTsE1fCYQaBjuk5ZyrIOTbd8Pmb6GRF$JimphWA0FOI$YerRXhvxk+u7EwScvd0iGHe59VaExEDuxgIlQp8C19j5bI2cb+cjZo8feZybrnO4HRv1TMLVkS6jioAoeCn-w+m4m6xCOhRmF3NMxXHDQK2VBV+IXl7Sp2YFTMddSg11R$wMTjhwoB67fcPs-4DqX7FpEtMDj2TIFELtROLXngZD9Lc89Neo0PtK6hp0YWGQxc3Tl0yVTRSukCde$qpxRPoRragiFHjaijG3lCcgQJfJSAMnqSmSY2iMsN4R3nbbjhXPSJpNKypsEvbycaA24kxRLKtDE9$sX4-PTy2KvVAKoXRR9mjDqqOpZGgs+EJ-6Wv-GYYHFyZQ5YrFLnAoBgBv7iRCXGCHlBazHndy7KID2l0khT1hnyAdsnxJ5ccEQ0Tq58AZCwI5+yLtJKA4$mFfHfMRE60Gp2+oBxFOhqK8NlqGhaQmWhQGvlnqjt6tu-pGfVm709jsZ61miFffANub+aCRlz7p9TwiQ0XswgYFtT+aVvM85n6naDS+B4kivFGLSLj403yctj2vcOQbtGquQVOj1fJs1hNG1ilv+ppXRoTxZoO$KdAhfaBv72vh08XnezNqPODuCWIqE+WMeaZ7Z-4wLiJugsW4gl9XsAt9j3lTCNWDYAVIoH5JHoQg28$jDFxjXmjW-ro0K-acQEN0+wyHHWGyG5DIiudwcTDE2obHJtZkLBLDH0EOsfH5k+Mehoi0lZtmoxfk+4TG5cKsATcI-yfSkK73Tx8tFdAKo-+97wn2WmsqWPaMdkBHudDfM5eCOg5zM3uoR2nHuil+gzcyFoto2f$I5FXSkAWJ07TuR1S+2ABygMM$ofDMmciI4RcdJerDqvozDEjW5jmXstDZM$55Jq+ADXoXzDtXb-DyV6Oyks6qBVsTka2nn7tBApamBn+dTgS1GhIyosB4xCAmCRuKOYBCpGDy8TzDZciXlIKzhYZF9C9C9yAZHXbKl$Y3R0DI+lsS$0LouB63avEgMg7-J$j8BZjur2lpez7qVcoec1NQeM2g2sITYQN0vJIhD2-F1ageKbIladr5LXW$z52voputoFPh8ehmbaq5Ejy$4LbBhqBNjOp7BtnLgyEgOasqnI3RMXmk3IzZNQqMGWr3nekbRZ1qCzwcS65FPbRxZN9F1ZRfl3NxoN$j5aCviw$Qd4C+TyY91WZ1C1m0xYtBMYjPhtY7exT2BYfyZPHCeHYWiabbjEvHAkPyTKi8R$McPb-agjqzTVrb$V+3NdHl$dr4+r3TV2tZTCNe5QN3XaCZwOTayzZqGmDhZFmkBrGM3n4a4+048FTNgxxASDD7W2vfwZyQ+$Xw6OyqA55higR2Y5pCdpgtsmX-ktE9M5M0JhIDR3JXdYGdZ50gklJHZo4FG2aeA52vmhhZaIcKMPlHoPqykm1ZI2ZVozucfZWqFoo0b6LtcXfo+8Y9rL4PZ1VY-CfRLfFyG-+-YAWDveylbb+-9wOMBuGE7kZCEiGm92IB8sNIaNJSA-uzOF-0a6wuwLVmLt3g7K0d47tz$eTaw6cg2oTuA9uJOkRaQ0W1SQIKQ2FO2dvPxlYsJ3dNMzODGNS+DRk9n5kA1$4V0o0$D$JQXZARBrqoSao833IFuFscAcKyzsDuJXEt2Yi0IQl0fq-KJjuv7+xSkIV$Th6wrTfFIo0IoWGj7S-OA4nh93GE9wEMIIDOMVZeDGhsmk+X6-EwBaoJtrq8jOzMEh5679Nxbq$oiOq2PssA$j1Ed1fTGJm3eRzMgaL4PczcbKB+bB8ueXx7tXJSd+Gdo04ELyBLZ$OceQ6yceILjoqLcHBIGzWPIgDEjCPShLNt+2YTDI1LSb7cOnVq7p3eV7vBG-AS+1WE-L6aKZ8hIhvCW9Mut1jjiihG8Esw2TB1ONNzGKW39pxrT2$yrL9oBQ2M+5q3nb1GxMkrS3PYnZgOItfZ2kP0-4FxCW2$lXoGJn42N2h8WJ1gJGtYCeGhfDqOEmEfoFyrNZxd0T3aJ4vLpr$6j9I-OroO22rJCrD+kEWw8gKQ1uZyFcKCiVM6y0SW0y8O-nQy59zZTceMvOT90TKA7lTqXj5CQ912mP6GBJytQdbJImksBuKby9lfOwy7tR9gd+TsLR+x+20ywl3+fr+ECCu7uHRHFQ4OlTwRZ-r$9Pr2yTI70rwsEzvt5xw56Pln2ArCoMGPHYvOFBQAe6GAXTX836gaibRNQDpHN7v+vcpjIIesimMlNAnniyrhsMLXuLMsWHlVQDTa8fleH3D08jzF+tzTSc28ZDXq6g8IDaDtpEk2eiLdcMwNR7oeVAHLNmEXn5OGRwa8IvlzOPnOopC8fx6fzYjmIk-DQX6dtldIq0xDWNVCENrco3mgVg+fNHqO77DAjquj6R0dXXgocZto-LW76DmZwuB$vPfriqJ7BEK65hE$i2xzdca0kj72LztGay352F1+I3PRsndRRZV3oaaWWy0BoGwSosxWAFtg6eL99w+7CuLFVFY7lVKymOZKajk-PW7VA79TzGsueNjdobcOT6bfF-A9GvLCJFnlVGQIOEjmbEYs67GO6naBq3lY0hsEFf58iKnJXdmb9A1GQVGI5SDqTs2hsE0PS+6BpovjQ8Qx-h$oy4M7Z1pER570RSl06MnpFF-mWHyM5AF8R3xN6zxICZRGctuzP5coRLToXwu2Lc$IePq+ck7nhfORM0CXmT1rbeKpXZTAo4f5Jvjfej+6yFkzrcKAR7ATSHIyLvFhGfRPnPZj0P5rW-RsRrJCVX6bexELIr2PnYjm00XydK+j8j+BJBZMIwS0CWmKdz9QSSotBMCcXLI-du9kMbFnK1TBLkdwDNd$eOFQLZxd4+a2t1SDReSHfBQjr6-lAdsBRpP6tzfRJXwGpHo5shWb21zD4cbqFXpajstI-puYBsDTAK22A8iO+4EC2kd0qpGcb6WC8dDRpVTgY8-$ij+-p-C+qElZ2muX-YbPdPO8TrfCcpGMS9WHGZ2FHg5cmk7H$7bqkXkuc+Vnnlfcp6a2oHpoRAc8PNyjkxXbDVqXrZ8Ku24wwo+AvJryYAAeWb8ZYFqEEKLq0M6wzt4DojmQ4nH+8kotOxqGkBnAaPuxR1FIehSWrzNe$$Wkuql3d9yFbMV0f6GIVKf96xw2AM5pvMygMtkSB2fPBMv--wSt4gy6c0yBRuf$jFEPMWur2-48OfXwm7BWWmNzZSrxw8adft8fyFa-pDX3MKB9di$v9NQh0i24zq-brC+yN-GfTQ$k1Afg23+aB6aF8VrFD-HNpRwGdSTgE7FMK9R2OemzkPpn$+hoVFdAiANo9gYdFz15LQqMd0V+W+oneLsRNpCAaWFt-Nk3t9hpHn4vMCQXd3inMn48Hcf0yrpdQeDJ3aEgcSLGuXea5TfVNvXP85lM55I8ZJXp3+ixV9nzcmw+dx0e-05ckWHx0-pK-wBCsi0TO0AJP0HvFe0s3TtBBql8V8v7IyD3b3E4F3NY-pqdHEvmXqEgd452yBYy2sCsZp0b80gKlmZhQZ01IyuaXNSdVyFGZp6uz5LG01lZfx5bpHL47kxEMSqB7-8jCWCCMA-H8KDExMBRBSqfH1eDvm6ExMjsKqT3k56rxvbM30sm$kOinGHxPPCbVj2VJj8I7iuD9XqK3W6$Q7+DiCfZYock9hhxCvl9A0E-2xfPmOWMmJiQ6bBvmlhHpvIoAqbOLRcpl8dR-VwOGcOiSd1289s-PuJcK+MGiAB8ygs4qkQygvnqvjvbluqL-7Ttd36WCGcceMAF+2+38onpOwR5RisOGLoyKxbjZkgs4HF22sjw+PJPYrW7e0l9CCDWoZt9jbf1YbnfEkJAJMjYSfJDdZQixYprBJDJqS9ZNofAgwFnV66B-+-KsTWAT4MK9NIzeuRwyePbvHtR4RhvEWl0jkbPMs-2dL7uxNikNeRHsnW8sTrE0cnv5QzB34h5gnPMXp9P-oTbvHso1HoqKvnv5ucfbg4YHYgwoogKopHfd3Oc7pWw9BoidMyuTkCvLun34jWnkcBbPVEgtgcPg2dW6Acrwu2Baa5fMzDScT$n1MbND+256JF8OsQW2p+mkgMTNjz7Mo-q$p$MsoBmS1DJ-5L71S1TJfGiGp$od8hLNwBNggRyK49AzQ2F$+7I-TIBSvd-J3JAjplLuH+W07q5SPJ0nQxW6JE2DGdG0X-$F50tOfGu-3hmVRDQ48$NP8wxGLCyPhOSWsLoNgHvM-6bnd37YhK0Me55bfZFRujZmAL9Z7xoBnV2SMi19dZJu7k3-A5jS7KHLJgu4hO3D5Fvm9pwKTCSKNxrMK7mgiwTs+2L+$2Oe5yiNaMJVuiWuyeQICDKAPiFN6oB5BaEztoBsPkmsLCD-2OVthDQESxILzmAQ$AMS9Rr22o7gho5eqXE+Vx9rn5DfE64RLZ2p-TXS3xw4v3d1O3XjmTsq7nB48Xru0-$3KP47d6ZjLxuy+yIWE4JfaluZxZqe$kT1NR-LxOYjTSawV55xbrOVQSR6StfAeq$lIJ8D-7lbbA58DZdpLH8OFeClkK+PZjFd3Q9G+QAv9-sVVJwyid$QzfomvwGHj+B1HKdISPqWw9OomkQlstatx3O4AQT9QNxkk$uRDiOtiR8Sn50uk7gDGp+cA-jeKQAP7-$vYuO+GgZqsao0xnOe8oo+TSSSI$-nk921DH2BSLKnsbSHJijrhqRurF3SLRqVmcf8sNCL27Qb6O1AwePfwAgfpcDgGBjDRbGWsOEy8fDAsf8f9LiZOE821j8GRHFpdC0uO6upEEBLX2t+tdHtiRy9Y2FE-DQgHt9+KWYcNKmO9gnyoXtIlg57iZzV-xz-RvGh+Y1QRauOgifj+9cQcp1BnhrwhHf5ad05XnRoNc$9TolgQACRtKZmL6W7Qbs7DqMoCQTFYyJOOFvs$h+00uEuX5M0ByRIDosknkvp3f1s4Rezi+VLRoGpzkTrGSVDaAkHjr4rXaoHLThxE+WWkpfH7oDLzIBopyMo5Googf03kcgLfnJFWAOKALZdOT9avS-QN$f-QOl6LTqxAPOOu7Bzb6edDSpj2$rMX5I9rsSZ-omGp9K3JK7XHGYOjA2ZjTZbjtZ1QauHQKfmNbEc0Zua5uyTM6lLOYmbqelBYInW8fQmwpZtrX0ji38ZhOAwFP31Avtkm6bxnmpR+frpCzT$xsVgCCFv3zBYW9QYG389VFc$Pn$eZC2YHt3slQPSdloZhLwXgnEKBSMFej+wDtcDKBbQez4uT64Du1P5e4OTbDoYSrMscW9zEya+CXPayTQP17cXdTPbuM+3Ht2M4eBiO88RpldPVS0tdYOVzmeg15uqrJoa05xFsRiaJwVQDlRAGvkcmmYnx12gHGcaSG$v852hFVC6PLYsRfh6upmaqe1ghSgqsCT+X+J+F$FeXzmBM1ZIer-olbCn-II+jgcDRMN8GTKhCBeDDlDqp7OE2Ev3nfwh2ODV+VM+pGjSIxTroN$fKp35dRVRBoQgeED3PKe5rFqMGsZOwuaSDDC35kE5vVmvP0MPh-wuAnlPlz5eVpJx60aX42SJXjkR1hHeS+iTZpP39C8Rx38HPuoruu2DbX+8XyDVfsQT3Kz8XPceX57H671M9i$cyQSNvK76-d1fwSb1VedTGJfj4GLOZ7Q3tSkSaPfT-X1nIQLgHvV-iJrHLyiAy1euMYFAN9aDd5fTM79WOaPesjfLL6IYGyQobvowr9TYbKIdFXurdK0HxqYPIkmOFth37DA5XPvZbhXRJDYfLfdjS0BQ8TXWZdLDcJKQzYBcN5AzdMS$dPmjD7xlmJonGuYTeZogzQrBafb922eNtJLcG5J8nPWomifAnkwAfex5hWTT6D689HTmzrtBuL7x2bOL$+96blEXfSKt8T6TgYeJkmtME-Fm2H471QBIxHfp9wS4eD4tDNIZao5mn-7o59I9+8iZpd0Qg-rqlY9oM7BxiSj8bjd396WXELk$rP7qOyuXBy--3JuSMfN3rfKFHRDa4xylqaSxLcVWu$dsZuRKDPEWL2Y5vR5$QF0gq3kvtKxwoMqftogOouwaCRClmggrossAmf-BJy$La7qkGsTrs$3Wacz$$qVqvpVtEXGoKbVQilV1SGvh8K-GCdVeMD46xW-jCj6QMBp5GNVumdgRjR$cZRC0Q42jF+euI8cD69jBfcs+afVS$ew+zfllSbGoRRtYY731TYBh-z992o-M+WLXyykZt7lqm9W7-APyM8EcMWcyuYllH-MGOAvoqSTqvSa7X+p7XXrGz-pVw3CAZ3F6lSgjpeLGoLm16dKSffVVj4aMyu78O3T2jJG-6n1Y5Nobebb2OC6cgTVDBlHJouGA569h+plIAw-+7Rln0LSRWybe5q7TVufMjj3fyu4eGVnke4M$jNnwlGvFXIedlmvXuwt73L-kcbhp6$ixpoZpG4O26j8aGtoaveY$bMKTYllH4VznmucpdxcxmiYYQyJD1dPGLTEaMnKeT6F8X0NcOf+wBKmh2JrJYDdJaH1vd5GedNvqxhxz4iO8XaiD6sxcxVSWnYaMaYCt2-Iwi$KBofOl$pt-AuHBEt$10RPobzXj84J4qkoMdAyFmtv2ROVpYyTMtrsv$GzwJOvVs3wY3GHXIORmKVZDJSWZ+EpDMEgBkr3eOdRdkGmmbz7-LzMnR$rJ0QRFoA3bfM8MreuzGQ9ibtqkF9kf6SQZ+CWvS-hkfxnbleIyLwFrlAO4bW5uLoRbzVDDw7IgftSuafHXNNptmAwmnZ7OctbF9OQRv56Y8gw1ovj0r5y4TsKDyyJH1Np245rVe8rPw9vKc66YFfOwtwW1N-bqSSoh7+PdA7jy8kfa8FmnmKJe2+0q7gAi+EpAeFymMj0g7aB$jVDJpBEgnxAH8+VWEE3Bh6u4InR3f+9520EyGE$huwqbWMIbiQX$G9eG$$6E47QEx$XEBIMEa7NHSNYqZ8OHL-RxN-IJBSJS2McCYNR9dAIrKO6-vHnGVgDPwkc4AjOhcn7Wv+YRzg60H1F44TEp-EMoyaIpRXXNPvNhHlbtzd2xs6elNI6-Mm+nKYPYvnLA0Fukc5tVj4HOdwIVnfa9ZohHndNEMKms48CEZQRx0zMNQA+qXxt5IdqTi+-fMkRpAwD9Rtu3p2r4js76waV4ISXj8jZI32T9M$zy$Y0i+mjfrdoT3yb04hIQDLZnNBsVFANffa-J$ymZnHqEVrw3khCh5uX5IttvOimuQ8lBzvxobgznZm07KZKMdu5zR+xK$4r2XXjxNWc40fkBIAg22taYnIt+$Hp7dtmv4dBsGCQCnBtAxRoT9LaQBfz2jXHZVByV+vnc08I5VIpLzEpGiu8411h88hzSpsJQ-udCmuADBuS-nJN901XMjgSMoLQFs81+D$fY6p2ZmudYaPR1VouBmwo5fu7XvCo6K6bgDvSQt4syG4neHVCngkPpv$rY5PlYeWOi5tuEnQBRR5t17yeRvYPdT0cHlvr-pp8YEEvAViyNi-CcFBD1GaCclJH80$SLjxDylpEJGSCQMoBO$npfnyX$+FVrL45vqmGxibCFQbWSZuPS$bFyceBBq2CeF2Ap64E5SKsB6uhiegGf+WOFd39dEeRB3IuWzesMo4-ZNQOA+KYzaKEffpBG5tMiF-3W7wQmP+TKfSsZ7N-5jrXreWW7luICzty1YIjAp9F1iZHM05++fBfK501PxDBd3msnAW7bvGmbPY07obu1Wk9tCLjhHSAbIR3Mktf13s9oC9OaAhdbiFO5T7GamAYH46u8-wj$9zwiKfbYVLLn+9f0TMTpcIIaRHjB082uu00VCIPAdOLuL$RJIQ7hgu0nwcJIt+PKmmC3+-oScNXpeY$89KLnJVTnDZRxh3pchgjvb9rd0RkPgnKe9h1s3aKBmEnPGLuxuctKXdMKwFHAVtKurYeI3YTxOVlRjQIEaHBM0h$0VvWNfHzpREKltAaO9$Ql-v-4r+TxaDSXZ-dx7k0WlKQ94e2RBe6esXqnoyiIksKTS+KMkSokIFrd74ej6ePJBF62t+bfd8RLJ3wAiR5sIQu+$Jif004KwHVB7XY4y6yruE8bOXgZbl-wR4stFNqKHSsPxNXykLq5LewwGiFQWiIwRR1k1St-AXc4ZDG6z5Io+aJMGg$kc0k8bi+vZi6dMawvali0GRz+r4W+SQN1h3Y75xTr4K56BVIZx8lmSYSPomb1nmE1za$AMairI2smlXq1Ee6k-ycTf+W2P6n6CgY-3g4jhPEl8vTf8Hnxz-gMtFMxwIlCga1LF8vms2kn7VhZh4DHdmOhBLZPOG25jZzdXwa9yj-zCDBOgsoLnQBZK2YcQCnPkwTZ0DS8X+Dtm496$HrzlJcM98qCkrOZXbfvLd3YO-uTBtvXsoDCMLjlteRa1f$R$0BXXEhdXYaT68e7H7B-$4zRZXfBBtuerDJfHJoQP0fW+5MLi59Y9rwyFSqsh8co+DCGGOcrxr72LYiV-z$5uKCXmgfrvIDubsTm0sNVngo0dIGDjPN6LBkkgHlBY96RNnq0FO+oXaxjWCW6yS7ORO6IBAf8B+3S+0AuVY6rjCaL1alPRTT$Kk9Elx1KbEg87eVYTun8u+Zc45tTlIYBpDRIp8Vr3pqJpg6fiqMJOg-w1+Y0BHASKXn3m5tvaCMr3jDbLdRcIdg2cyxOVCNFG5mtTtyQ3OP8l5LpBpeKyMgzNkWopX$MhVag1gnLq7$slVbnG3pPNPNYVz37q$STF0NT8vkdDCrPG00l6umqrhvvgE0P3ZW2Xl+XmjiJn-D0KFfqmXHQNe3I8i5ZffpDEwOaFYaI4uAcv93lq5myePADjQwg-Q99doyIeFm84iOWtK4RyVkDGLeBjlGWK5iY$+PXd-h$2mgw7mij0JLpKMoha26w13Z60kBzM0G$OteqPafc4jpy0W-Tw$7ksdRkWx41fwbIVZelZi2Rr5cvbi5PNMxJrM9kn9zKL8BJN3O1V9BxXuhjLWYa6A4HKQD1e0YRnMcfhRBpGZFL5Y8dZJkA+u8GEbHC9T28KksndmeKpuZI2WJeJ7Lt11IOimdmSPooKzsQNch9gnMfBnNbCV1OGbYu23hWgFFsajR3gqupjupBgqSo-pnkH6JG65qD1v0tFWt107eETCRar+ImE5MwrhrzgwkjYnGMuu2v+f0l3sPTZTwm6yhZ18spytx8MZjTcMlW+P$sa0yDcSZVcKHl+miap0pKRbQsWLwzQWqhAow00uMbE2SSaddA3sf4Euclkk4dNay7r7eswLSX56kbsJIK2OuCRRvCNyY4GsxmHs1k68Ou8oYoQdclgC8wyBsrpk5aDjOrSw+yCntckp+fIYn7V1Ee+S6PyxzN4hkXDbqdPnLv5rKc5sy+05rKHQNLLRBjt6$osDpX3azAXoXFzJvqFlRR50IcdmZDVn0WONZngmrgdhLt1Qw-dqibVyBbu9eiKO3mCp12CQd5XGpzfh5tWumWgw+kv3HvM+KdvCNkbSI5QNSGzbiQA2GNVPFEn2vmkRW7Jlmspzuo4odtA33y$QgO-HDKt7cwycIpTVmzncGKxBG5y5Ar77Qe0D+iXXO$CcvD0Ssvl-W8h$oTwmyddCT4bt+0PttS8NgwqIzRhIN6O-WYfqQxpkEmlClEMDe8KJ1rA8Vem5$YXTaVHFB9IL2kpiIb+Q-2jz$8gFkaBdFV7M+j3XD5l$b4XnNPgg0CIMHgF+ksVIL7vZEwB5tLO1sQmXfeOxZDR+BNF1uvIema4kFAB3OpKYVVGh0zmAp+lCyd33S-+YlmDHyITp4Oxu70zTe3uywosl1ctV3hjlyT7Y5mW7iGXz+6EJ-zilW1EM-u3vhscOSvm0pYvF28RXKGqMxsrXYYgjTsCYDwe0TJNsfqjo9$W8sAzvJzEgbmrsMqtQJARXPc078uWblf8ndfI+9bRWc$Kjn7zAmp6PpapsxgwGHH5nLCIZ83pdW27Q7MmBvFT-E4H4GO+d3I8l$Ile$7xKugX3S2iqYA2aT8XML8C1AVrvZF$ii3ykr+9ZuF3poptp$HdFH6$-oeS9r58VpkeAXB1OisyjuNqi$s4cMlVDhutRj6QRwwQ7HG4sCEZSG-9WZrMjTrmmk1VbJITbfqK4LWBcasiAuTfykJ21nGAEh$QKGs16Kw2DwVKsANsYW9Z-$Rt-ucDOkz6rAJyTXYnphHuuyyPJlLFvp7C3MdR8HQV4pzVuGNImw8a9yNkcoiYMRa0e8Ea7oVihcBd$1rTspkcy1rbvbyraCkQfkWZNNVHRoK5-g$1CDyMdI9FhgYr8fH509CsEbf9VKpMhc-fKswM-NI2Qr3ZVP0sgRxfWTPx4eiCYghAIohqK4JerGY-+T12QZhVIdIWcwyrhhx8OwGZBu78QKz4XETHHFEc-EBLip4lSoHbsvjjfjwl9DbqnuR$FwbjR5jd6yro99OuYdD5lFLuOzl02iQqIPYCnXTTsoBemZQ1nFAe+$VsIzkFRIQahzo-KdjxR4huL3-7ovczWM6Svv6CK2DPFGbiWpAT-MVwqwfIuFSVD$YkREooBaagkxAqVzhmi8Zbp9rN1ar4IF+PwynZ7Nq335kz0b8kLLmACc520PibzYO3gtx1On7Q4YwraLSirt696RdH5gN9KD+bceC10TTRVor2kevtHJ3EqjP77OAIGVGaP9MPTnh1flDwtFRocg-LRkMvtDOZCB$1LJTkcMgz1F63Melcm-Fe48rHpMIN2fN+AXDXY$av0tmVrZCjK5hmKN5PqdEb02042wRSzndM4AvRKnhs9MQAuVaFSMCvZSGrxwmYBX0GLnv1ZSsrnv7pyAGK$CigVCDvfCwA+ZQfQVmBLeFNGyKnKp9$mBOOqVGZK6GDJoFuATasfBiQKBjqiArVYuYs6uZRnODSqkL+zTVMMqA1cd3g+HMrr4ILogP$Ob1X49HOhs3$7$x1n+5ikPl-FO2+f9kaa2ug$KggXnLosrDzHTQGOTqmsjWPb$F9MHMxwobVhV5FO0BqnONxM1yEfONwEYTAjG8Z+tmhGKatv9D1r8tR5j-MgVnfx3fJqMus-RPS9Dl8exWxkH0wa0XerPY+dbJWxtCWStkwAC+dNM$7YzkW8bdR889EM7DqMuyxH$fkWESbE-vDkbDTnjfzIxj9GsXjt0MNZQJMptdnQaMj5G0RnM7gJQnX+KkgKbg7TK5Zt0AabVjmM0qd0e9qD7Pk3$MTsJChB-b3Ie0f8DfoC6xkncbG4PQyPfYfcvfNu$o4pkOQSLSHVgiFrmCiSkxEhlo2Shc$CRdD0zmZs-RxTpTKXFgbu1CQJVfofBdge$NHq8f8JIFaSG3K1etp3bbhmvI0AdMcE2YfQngAcdrM+N9TTBBIpbXZalcZ1tbj4nZuQWYyuHk6fNT6$7F2HPpMZ-FVVviGmBnrFE476QTfxJH+ZREfhykEq5XrkC5qIEnns-9HlXBFDMiJQECQANtYgDBo6YY$ZRo6KOXT3uQqabiT24aKCY+zf8BhD09A+dE99-aSXEtLBuPuBY0O7WLBK4CjjEriOh2Cgz6uTKQfwMRHifdcOxZLquWE+qL$yClwIciJAKxbb4bsOLE6rajogi$OgFe8VORocQLvDQo59XvFCpJS6Nakh3hbDgErI8HkF7FKHh5CKx+cRxlzGBfa$Ih+fxYd1HoMhGmIZuuvoyGh1ut11g6EkdI$W9GecX1hytbDfEr22tdVYe$6XHqgxBOzbql1mayO$Vi6F-kqAH1v16wyYSMH0t4fI7wti8JjYuvdX2ApCWCrCyGck9BTF6TKgYV6xbYEPGXOndd7NdGnEgQdAhsddvvlBS-YCKsyVMk+49Bp+y87hrMXEd5jngoNF7hQHfyMJfG6uVT-FJQdpOG8BJ1PPHY4Kmrq7p04JI1ScwMrqKK-p4$8e3ggoOyDPxTlQieQYhPn3obtJAFVq7D8sAqsWK6sI32wgNLZnVFvv3ZJN5XpEFysFiQu9Wx6th6fsDyMnw2LrVRfHnSl94Mi-h+cMb3ziH$VEVRrIIoXQFQ6SsExxrO1kLdAV3InVw9yTIzgmSMMEHuiO+JDXdXILJeTcXaeFzZ-1yN+hKSerllBFQ1a4mj-BXm4T8CYgM3Ndvx$z4XTA7nF5R8q-5-6dx-Y0Yku2emGDf3nr1AAci$DiDhhdpdWGqGg3HFert77j40W$0F1hu$KVVEApzydQnnG8$v-xEQ3ADgC+hPidNnqq11z+GT$oFPWWG901pRwNFxY8j1MASdJFn+bu3FnW-Oeg0E8O+i19lAfdlde9jH9Q4GIgk0gItet2H8YkDS4dnHWpMos589bfuYdzGgx$6Qb1XTbZjgFRryKHwE5b"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: siSVB0BbevjeyR5SU3Hli653aSyc5/qLPJt1s/+FtWKSSZdAR3xoQD/kPxDyjNb06y8LhkMx9yV+R/HikX1zV8FopVgDdLfHmbHc+qX1iQxHYzHNSrsUoN8Sn2xwMJQsGEEx8wYMmzuwun8rS4BVSAVBZuvhxxT92fjf/oAxHe9w+U+iRooKeR9yiDwJBpAQhbBA/6S2CnKIYOPqSH01JVpA2YwhuFfqZZwb96P8sXC4Du3+KDD0H3w96G5m9h9rMxh/ww5xVTSDsq21rTQ7fQ==$5H3FRibf2d+NvLi/7lAgrw==\r\nset-cookie: cf_clearance=WNEKRmmrfgQGN47MMw6ZfvjCaDysxTnn0Qb.CQFrvhs-1784094613-1.2.1.1-Qt03Uq1ramNATvyPJZIIyeOQWiev3__v1VAskjMc4Lj7NfGuixgRYcCHta4dgiQ4sWy67skewtwPqliroynvDqTNTIaeiVpKmLYTkJ3aDPVJwq8QhY6Sxl.wlCePSCH8K6xI6C6JLknatgnDL4IwKi63YN6jQ2kCwOm60iczY3PVQkPu38OZ7K7Jav9B52KBU6q0iQePSwMC.4Et4TPyPzDZdHtAC1QD0Vsa3jHaxuy3.IoO_hRsUGFv1nk3RLR7HAKRi2kqgYZ0zSDQCZStXLg1ZQRZ9UmL3Mew7AqHiOzGrCc16CzXpcFGlhUuzK1RSJYIHBWo4atlQt6zsHZSQA; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=tg-app.org; Expires=Thu, 15 Jul 2027 05:50:13 GMT\r\ntiming-allow-origin: https://tg-app.org\r\ndate: Wed, 15 Jul 2026 05:50:13 GMT\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a1b67d095a725ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15609,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-15T09:18:40.566653Z","times_seen":17261326,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-app.org/apple-touch-icon.png","fqdn":"tg-app.org","domain":"tg-app.org","tld":"org"},"ip":{"addr":"172.67.176.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tg-app.org/","date":"2026-07-15T05:50:13.889Z","timestamp":1784094613889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tg-app.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 00:39:08 GMT","end":"Mon, 24 Aug 2026 01:33:34 GMT"},"fingerprint":{"sha1":"E4:D2:54:CE:06:FD:10:AD:88:44:53:BB:C0:AF:63:AC:A3:1A:FD:B2","sha256":"2F:87:DC:58:27:DA:44:74:11:AE:B9:CD:62:3A:CF:C7:BB:6D:92:2C:CB:D1:1F:A9:13:97:04:2D:71:8B:23:DD"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: tg-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tg-app.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 05:50:14 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dBK8d29f0XX7TE4qE5H%2FMqDQatJvG243j%2BWYvxHz7MpGQASfTbHqG83rT1Yts1ndeBpZ7lABqV1FMEgbTccxZ8z5DMwJr%2Fti1j1UYIB8GJw0NYI1Zn%2BTY4i2%2FjfU\"}]}\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1b67d08ca685ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":479,"size_decoded":969,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"57dd7bfa6c07bfe5eeada45d4bdd78ec","sha1":"395c6ad5c3ae0e8ea47281f5007c369551b32ad7","sha256":"c870990950ca5802e260be6786d1e6a148b1acdfeed4fa9bb6acce744488c0b5","sha512":"c455d00381bde372d6016e7b01eb8682dcbc2fbb032ef522f01f0ea1cd85abeb962aeb8de621b49b138b614b14285686a2c432b4214630f23fda2ed19bf4b9d6","ssdeep":"","tlshash":"27f0dc93d243040e220c45702fb2702450877ddbcb9a0d028897e1bfccd5a698363bad","first_seen":"2023-04-28T05:56:14Z","last_seen":"2026-07-15T07:50:49.003905Z","times_seen":3614,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tg-app.org/Telegram%20for%20Android_files/tdirect_install.mp4","fqdn":"tg-app.org","domain":"tg-app.org","tld":"org"},"ip":{"addr":"172.67.176.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://tg-app.org/","date":"2026-07-15T05:50:13.690Z","timestamp":1784094613690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tg-app.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 00:39:08 GMT","end":"Mon, 24 Aug 2026 01:33:34 GMT"},"fingerprint":{"sha1":"E4:D2:54:CE:06:FD:10:AD:88:44:53:BB:C0:AF:63:AC:A3:1A:FD:B2","sha256":"2F:87:DC:58:27:DA:44:74:11:AE:B9:CD:62:3A:CF:C7:BB:6D:92:2C:CB:D1:1F:A9:13:97:04:2D:71:8B:23:DD"}}},"request":{"raw":"GET /Telegram%20for%20Android_files/tdirect_install.mp4 HTTP/1.1\r\nHost: tg-app.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://tg-app.org/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Wed, 15 Jul 2026 05:50:13 GMT\r\ncontent-type: video/mp4\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 04 Jul 2026 12:12:54 GMT\r\netag: \"6a48f8c6-4b54c4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 349\r\ncontent-range: bytes 0-4936899/4936900\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cLeprmPMGF3EVl0PmusTJk9EQD9vAi0AdIG3vRPV49YyWWiCQ6ikX0Vt0mYx70DKCcGbJdJfbWMsyDTorhn2FN1T9Oq1qVZk9BbwDPB8wJ7szeg3e%2BzYpXUveGso\"}]}\r\ncf-ray: a1b67d079a4f5ebd-OSL\r\ncontent-length: 4936900\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4936900,"size_decoded":4937654,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"fc9e386b8a563f8ca2670a0ce7188a15","sha1":"9eab78452e1271a5fcd743d7cd83882fc8716d2d","sha256":"98d35187cbab85ccd7f25bbba1d0d43799cc045cbfacd03b42d4be4f82025eaf","sha512":"d49321325b34bf15e250c734fb86bbe764b229f899ed93fd294472ca493d9e3bcc228be82e0c739440dfe88c5eafe5478ff24e9e2aadc076d26bff7ea6ec7fa5","ssdeep":"12288:EahbJHYxmbRCRMVOUmxTYmf4vmQ6QlfdPbAfCYZ2KzQzH:/tCRMVOkmwvmafdP4Z2/H","tlshash":"6925f1812be30892f55d72bbc8e52c615da74ca3c8c1468779cfb96a4f312560e436fb","first_seen":"2025-12-07T15:19:20.025969Z","last_seen":"2026-07-15T05:55:27.401473Z","times_seen":6,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-15","alert":"Sinkholed","trigger":"tg-app.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}