302 FOUND 734 B URL User Request GET HTTP/1.1 IP
Certificate IssuerGlobalSign nv-sa
Subjectclck.ru
FingerprintB1:D4:52:A5:3A:7E:00:8A:8D:5D:DC:FC:BB:48:90:F8:05:B9:7D:2F
ValidityTue, 18 Jul 2023 21:01:51 GMT - Tue, 16 Jan 2024 20:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (624)
Hash 64f7084721e46b5a31ce3daa3d2f7dcb
4613c1b13b3f0a73eee93d8860d55dbe53e63d36
a99a437bdefe6b5fcff817b996e5c9f167cc0a172037eaae680945ef61415717
GET /35giBZ HTTP/1.1
Host: clck.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 FOUND
Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Access-Control-Allow-Origin: *
Content-Length: 734
Content-Type: text/html; charset=utf-8
Date: Sat, 16 Sep 2023 05:28:28 GMT
Location: https://sba.yandex.ru/redirect?url=https%3A%2F%2Fsend.ksamata.ru%2Ftg_dbb_1%3Futm_source%3Dtg%26utm_medium%3Dadr%26utm_campaign%3D14_09_garmoniya_d51r_djh&client=clck&request_id=1694842108345715-7977491235680880527&sign=7ce12a0fe59fccf14e24e68b2fab6e0b
Set-Cookie: _yasc=eEaInkTXJQAW3uMivru0XMDuv4dsBqTZ0Fhd4+HfaUWKuRQ10vqMNGP4lNth1ECjng==; domain=.clck.ru; path=/; expires=Tue, 13 Sep 2033 05:28:28 GMT; secure
Strict-Transport-Security: max-age=31536000
GET sba.yandex.ru/redirect?url=https%3A%2F%2Fsend.ksamata.ru%2Ftg_dbb_1%3Futm_source%3Dtg%26utm_medium%3Dadr%26utm_campaign%3D14_09_garmoniya_d51r_djh&client=clck&request_id=1694842108345715-7977491235680880527&sign=7ce12a0fe59fccf14e24e68b2fab6e0b
302 FOUND 420 B URL User Request GET HTTP/1.1 sba.yandex.ru/redirect?url=https%3A%2F%2Fsend.ksamata.ru%2Ftg_dbb_1%3Futm_source%3Dtg%26utm_medium%3Dadr%26utm_campaign%3D14_09_garmoniya_d51r_djh&client=clck&request_id=1694842108345715-7977491235680880527&sign=7ce12a0fe59fccf14e24e68b2fab6e0b
IP
Certificate IssuerGlobalSign nv-sa
Subjectsba.yandex.net
FingerprintA1:93:9D:43:50:2A:99:2A:63:61:DB:70:86:1F:6D:C7:B2:72:98:B0
ValidityTue, 11 Jul 2023 21:06:33 GMT - Tue, 09 Jan 2024 20:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (310)
Hash 47cbd31f8904c0b43f8688993b051dbb
1ce533e34280c7ab214fe86be008ed009df9a344
2f32e30bcb38a11e39f7afb6f43582a83efa604545b4d4e40acd653b126b1494
GET /redirect?url=https%3A%2F%2Fsend.ksamata.ru%2Ftg_dbb_1%3Futm_source%3Dtg%26utm_medium%3Dadr%26utm_campaign%3D14_09_garmoniya_d51r_djh&client=clck&request_id=1694842108345715-7977491235680880527&sign=7ce12a0fe59fccf14e24e68b2fab6e0b HTTP/1.1
Host: sba.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: gdpr=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 FOUND
Content-Length: 420
Content-Type: text/html; charset=utf-8
Date: Sat, 16 Sep 2023 05:28:28 GMT
Location: https://send.ksamata.ru/tg_dbb_1?utm_source=tg&utm_medium=adr&utm_campaign=14_09_garmoniya_d51r_djh
Strict-Transport-Security: max-age=3600; includeSubDomains
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
GET send.ksamata.ru/tg_dbb_1?utm_source=tg&utm_medium=adr&utm_campaign=14_09_garmoniya_d51r_djh
301 Moved Permanently 123 B URL User Request GET HTTP/1.1 send.ksamata.ru/tg_dbb_1?utm_source=tg&utm_medium=adr&utm_campaign=14_09_garmoniya_d51r_djh
IP
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subjectsend.ksamata.ru
FingerprintB5:6E:BE:CB:01:56:ED:99:BC:25:CC:AA:F7:91:35:A9:3E:33:63:B6
ValidityTue, 15 Aug 2023 22:04:57 GMT - Mon, 13 Nov 2023 22:04:56 GMT
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash e7863e11ec374a28df4d19f01a490fc8
afb8b8cfc7320559b7c8f828ad597141ebb5636d
2e63fbadc7c426393ca10354423b8da28af9208cb8f9e2032fdbee95719d6c4b
GET /tg_dbb_1?utm_source=tg&utm_medium=adr&utm_campaign=14_09_garmoniya_d51r_djh HTTP/1.1
Host: send.ksamata.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Server: nginx/1.23.4
Date: Sat, 16 Sep 2023 05:28:28 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: ALLOWALL
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
Location: https://salebot.site/tg_dbb_1?utm_campaign=14_09_garmoniya_d51r_djh&utm_medium=adr&utm_source=tg
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS, HEAD
Access-Control-Allow-Headers: *,x-requested-with,Content-Type,If-Modified-Since,If-None-Match
Access-Control-Max-Age: 86400
Vary: Accept-Encoding
Content-Encoding: br
Cache-Control: no-cache
X-Request-Id: 00763e4c-4cfa-4c5a-8099-06aec1ab8ed8
X-Runtime: 0.004494
Strict-Transport-Security: max-age=63072000; includeSubDomains
Content-Security-Policy: frame-src *;, block-all-mixed-content
2.1 kB IP
Hash 62a217a4172765c8b85c32a1b6d192c1
1de8b3be6c60088175aaa3d95c65a298320d4d7a
ddc93f70aa2ed019b9eb9bb3fbfa3fca8d36c5987fe02210cf1e64cccff9077a
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 16 Sep 2023 05:28:29 GMT
Content-Type: application/ocsp-response
Content-Length: 2108
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 15 Sep 2023 23:52:09 GMT
Expires: Sat, 16 Sep 2023 23:52:09 GMT
ETag: "1de8b3be6c60088175aaa3d95c65a298320d4d7a"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
GET salebot.site/tg_dbb_1?utm_campaign=14_09_garmoniya_d51r_djh&utm_medium=adr&utm_source=tg
301 Moved Permanently 4.4 kB URL User Request GET HTTP/2 salebot.site/tg_dbb_1?utm_campaign=14_09_garmoniya_d51r_djh&utm_medium=adr&utm_source=tg
IP
ASN #14061 DIGITALOCEAN-ASN
Certificate IssuerLet's Encrypt
Subjectchatter.salebot.ai
Fingerprint86:90:D2:F2:97:33:80:82:54:5E:29:57:02:12:25:59:42:EF:D0:6A
ValiditySun, 20 Aug 2023 08:47:15 GMT - Sat, 18 Nov 2023 08:47:14 GMT
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 03381d6d216865c41d1884f730989426
e0ad700fe5418335f10a91342311fd63ec64a6f8
cd37b87bc0ff6f4dd38f5a421dce8cabba9b3422f12caeef9701fae0fe383881
GET /tg_dbb_1?utm_campaign=14_09_garmoniya_d51r_djh&utm_medium=adr&utm_source=tg HTTP/1.1
Host: salebot.site
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx/1.23.4
date: Sat, 16 Sep 2023 05:28:29 GMT
content-type: text/html; charset=utf-8
location: https://t.me/ksamata_sb_bot?start=id183241449
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
vary: Accept-Encoding
content-encoding: br
cache-control: no-cache
x-request-id: 0b952b43-c7b6-41f2-9e60-ba63d16bdb6c
x-runtime: 0.010211
strict-transport-security: max-age=63072000; includeSubDomains
content-security-policy: block-all-mixed-content
X-Firefox-Spdy: h2
472 B URL ocsp.pki.goog/s/gts1d4/Sfxz6vSjBEU
IP
Hash 52416655e66db2b784795edca67df792
7f5da4cdd6873c3d20aacae49ffa938d194a4020
47c3b9d5de969dbf6ca17707c0bc4ec07837d61a48f29d343f0d8b43161e0962
POST /s/gts1d4/Sfxz6vSjBEU HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 16 Sep 2023 05:28:29 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2.1 kB IP
Hash a1637c0559e118516daa436359000790
05eaffca6df39651023c58598550cb133da578d6
4860802f73704558506350c01201cc3a11142f5f92518dd64afa51c604f924dd
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 16 Sep 2023 05:28:29 GMT
Content-Type: application/ocsp-response
Content-Length: 2107
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 16 Sep 2023 04:59:34 GMT
Expires: Sun, 17 Sep 2023 04:59:34 GMT
ETag: "05eaffca6df39651023c58598550cb133da578d6"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
2.1 kB IP
Hash a1637c0559e118516daa436359000790
05eaffca6df39651023c58598550cb133da578d6
4860802f73704558506350c01201cc3a11142f5f92518dd64afa51c604f924dd
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 16 Sep 2023 05:28:29 GMT
Content-Type: application/ocsp-response
Content-Length: 2107
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 16 Sep 2023 04:59:34 GMT
Expires: Sun, 17 Sep 2023 04:59:34 GMT
ETag: "05eaffca6df39651023c58598550cb133da578d6"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
2.1 kB IP
Hash a1637c0559e118516daa436359000790
05eaffca6df39651023c58598550cb133da578d6
4860802f73704558506350c01201cc3a11142f5f92518dd64afa51c604f924dd
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 16 Sep 2023 05:28:29 GMT
Content-Type: application/ocsp-response
Content-Length: 2107
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 16 Sep 2023 04:59:34 GMT
Expires: Sun, 17 Sep 2023 04:59:34 GMT
ETag: "05eaffca6df39651023c58598550cb133da578d6"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
GET cdn4.telegram-cdn.org/file/YORa7xRZa6HimKwv_1voZQ_NhZTUJPgO9ps3n32xo7u9f3bf5nAcI62NSeyKXkB3UX_ro9ggGBzGAzZgLOhiKZUewOalqkLAt-O8APWXOZ4rAlXaQdWVOcKuq6arTQsKXI78Eo_VhzLDFOeYA_P-FM2VxHeztvoF44o1XCdo5eUrHAyrFCtOicHr45yHxEps4digdw4i08SPpWPgA-MaDlsYl6lUH5G7iDJ7KjQP4U7xA-dmhC8JSm6RarJLroHd1ga6yo7r9z1F8V_AV9EYrA13-ptT4uXw9VivleiH-cZC8pYvuut3lpu_0p8_39TjpSQ6TX-w6UuvZxHch86cRw.jpg
200 OK 33 kB URL GET HTTP/2 cdn4.telegram-cdn.org/file/YORa7xRZa6HimKwv_1voZQ_NhZTUJPgO9ps3n32xo7u9f3bf5nAcI62NSeyKXkB3UX_ro9ggGBzGAzZgLOhiKZUewOalqkLAt-O8APWXOZ4rAlXaQdWVOcKuq6arTQsKXI78Eo_VhzLDFOeYA_P-FM2VxHeztvoF44o1XCdo5eUrHAyrFCtOicHr45yHxEps4digdw4i08SPpWPgA-MaDlsYl6lUH5G7iDJ7KjQP4U7xA-dmhC8JSm6RarJLroHd1ga6yo7r9z1F8V_AV9EYrA13-ptT4uXw9VivleiH-cZC8pYvuut3lpu_0p8_39TjpSQ6TX-w6UuvZxHch86cRw.jpg
IP
Requested by https://t.me/ksamata_sb_bot?start=id183241449
Certificate IssuerGoogle Trust Services LLC
Subjectcdn4.telegram-cdn.org
Fingerprint39:B5:E0:DD:C5:C7:DB:C9:A0:FA:31:27:44:68:59:8D:7A:84:3D:AB
ValidityWed, 09 Aug 2023 17:00:58 GMT - Tue, 07 Nov 2023 17:55:33 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x320, components 3\012- data
Hash 708eecbf43e2e44344f6459d3a0b6bc7
0dfd8cc9aa0d9a659329c36e1b6bd1fba90bdb16
1b645eebab3f0eb53c9b096892ba3d5ca085a002f6a0a1d8f9f88ba89dbe2b22
GET /file/YORa7xRZa6HimKwv_1voZQ_NhZTUJPgO9ps3n32xo7u9f3bf5nAcI62NSeyKXkB3UX_ro9ggGBzGAzZgLOhiKZUewOalqkLAt-O8APWXOZ4rAlXaQdWVOcKuq6arTQsKXI78Eo_VhzLDFOeYA_P-FM2VxHeztvoF44o1XCdo5eUrHAyrFCtOicHr45yHxEps4digdw4i08SPpWPgA-MaDlsYl6lUH5G7iDJ7KjQP4U7xA-dmhC8JSm6RarJLroHd1ga6yo7r9z1F8V_AV9EYrA13-ptT4uXw9VivleiH-cZC8pYvuut3lpu_0p8_39TjpSQ6TX-w6UuvZxHch86cRw.jpg HTTP/1.1
Host: cdn4.telegram-cdn.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 16 Sep 2023 05:28:29 GMT
content-type: image/jpeg
content-length: 33410
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "fbf21674c30c46b860a58f7311d633750dee2cd8"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
472 B URL ocsp.pki.goog/s/gts1d4/Sfxz6vSjBEU
IP
Hash 52416655e66db2b784795edca67df792
7f5da4cdd6873c3d20aacae49ffa938d194a4020
47c3b9d5de969dbf6ca17707c0bc4ec07837d61a48f29d343f0d8b43161e0962
POST /s/gts1d4/Sfxz6vSjBEU HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 16 Sep 2023 05:28:30 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
200 OK 11 kB URL GET HTTP/2 telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/ksamata_sb_bot?start=id183241449
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type Web Open Font Format (Version 2), TrueType, length 11028, version 1.0\012- data
Hash 1f6d3cf6d38f25d83d95f5a800b8cac3
279f300ca2cbbdf9f5036ef2f438607fbf377daa
796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f
GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://t.me
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 16 Sep 2023 05:28:30 GMT
content-type: application/octet-stream
content-length: 11028
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: "63512b7d-2b14"
expires: Wed, 20 Sep 2023 05:28:30 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2
200 OK 11 kB URL GET HTTP/2 telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/ksamata_sb_bot?start=id183241449
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type Web Open Font Format (Version 2), TrueType, length 11040, version 1.0\012- data
Hash 5e22a46c04d947a36ea0cad07afcc9e1
6091d981c2a4ee975c7f6b56186ee698040bb804
0f53e8b0a717ca4ce313eec62b90d41db62c2f4946259a65c93bf8e84c5b0c44
GET /fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://t.me
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 16 Sep 2023 05:28:30 GMT
content-type: application/octet-stream
content-length: 11040
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: "63512b7d-2b20"
expires: Wed, 20 Sep 2023 05:28:30 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfABc4AMP6lbBP.woff2
200 OK 6.6 kB URL GET HTTP/2 telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfABc4AMP6lbBP.woff2
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/ksamata_sb_bot?start=id183241449
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type Web Open Font Format (Version 2), TrueType, length 6620, version 1.0\012- data
Hash 376ffe2ca0b038d08d5e582ec13a310f
ec85284f360bada79122b5dca3088103c769ca8a
2f662599cf4323a18b4f7da381a998a8873c0277fff2d866336f7ee943a102d6
GET /fonts/Roboto/KFOlCnqEu92Fr1MmWUlfABc4AMP6lbBP.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://t.me
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 16 Sep 2023 05:28:30 GMT
content-type: application/octet-stream
content-length: 6620
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: "63512b7d-19dc"
expires: Wed, 20 Sep 2023 05:28:30 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2
200 OK 6.5 kB URL GET HTTP/2 telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/ksamata_sb_bot?start=id183241449
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type Web Open Font Format (Version 2), TrueType, length 6460, version 1.0\012- data
Hash 491a7a9678c3cfd4f86c092c68480f23
32e18ae407d782adfd54c78c6259c7be52db6bf3
41b5c3b25f4258190937deb900fa57a6db6d450ce7dd2af2259af760119a1c41
GET /fonts/Roboto/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://t.me
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 16 Sep 2023 05:28:30 GMT
content-type: application/octet-stream
content-length: 6460
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: "63512b7d-193c"
expires: Wed, 20 Sep 2023 05:28:30 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
GET telegram.org/img/apple-touch-icon.png
200 OK 5.6 kB URL GET HTTP/2 telegram.org/img/apple-touch-icon.png
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/ksamata_sb_bot?start=id183241449
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced\012- data
Hash 295ccdb03006b8dfef45090dafbd46ac
491ab660270e47cbac6a5731c51cca71c1c1b2b1
a51d667d4262047c23e3a2a8aac3b46dc8a58c686cc013f2354011c07bf22cf3
GET /img/apple-touch-icon.png HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 16 Sep 2023 05:28:30 GMT
content-type: image/png
content-length: 5644
last-modified: Thu, 21 Apr 2022 13:47:47 GMT
etag: "62616083-160c"
expires: Wed, 20 Sep 2023 05:28:30 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
2.1 kB IP
Hash a1637c0559e118516daa436359000790
05eaffca6df39651023c58598550cb133da578d6
4860802f73704558506350c01201cc3a11142f5f92518dd64afa51c604f924dd
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 16 Sep 2023 05:28:32 GMT
Content-Type: application/ocsp-response
Content-Length: 2107
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sat, 16 Sep 2023 04:59:34 GMT
Expires: Sun, 17 Sep 2023 04:59:34 GMT
ETag: "05eaffca6df39651023c58598550cb133da578d6"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
GET t.me/ksamata_sb_bot?start=id183241449
200 OK 12 kB URL User Request GET HTTP/2 t.me/ksamata_sb_bot?start=id183241449
IP
ASN #62041 Telegram Messenger Inc
Certificate IssuerGoDaddy.com, Inc.
Subject*.t.me
Fingerprint83:E0:15:E5:1E:0D:A4:7F:F4:2E:EA:2C:AF:23:7A:12:2A:97:C2:6A
ValiditySat, 08 Oct 2022 07:21:51 GMT - Thu, 09 Nov 2023 07:21:51 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ksamata_sb_bot?start=id183241449 HTTP/1.1
Host: t.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 16 Sep 2023 05:28:29 GMT
content-type: text/html; charset=utf-8
content-length: 4325
set-cookie: stel_ssid=87cace2d94c2a53eda_3749194558733567765; expires=Sun, 17 Sep 2023 05:28:29 GMT; path=/; samesite=None; secure; HttpOnly
pragma: no-cache
cache-control: no-store
x-frame-options: ALLOW-FROM https://web.telegram.org
content-security-policy: frame-ancestors https://web.telegram.org
content-encoding: gzip
strict-transport-security: max-age=35768000
X-Firefox-Spdy: h2
GET telegram.org/img/website_icon.svg?4
200 OK 1.9 kB URL GET HTTP/2 telegram.org/img/website_icon.svg?4
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/ksamata_sb_bot?start=id183241449
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type SVG Scalable Vector Graphics image\012- XML document, ASCII text, with very long lines (1968), with no line terminators
Hash 5caca7ae1cffb3da0b06150a15020005
04cfb934f238d33209406393a3fbf78454815739
1ea747a06fbc240c2594a8c523cb248bbda4784f0fcad9d0f06334f1a378604f
GET /img/website_icon.svg?4 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 16 Sep 2023 05:28:30 GMT
content-type: image/svg+xml
last-modified: Mon, 20 Jul 2020 20:41:37 GMT
etag: W/"5f160181-768"
expires: Wed, 20 Sep 2023 05:28:30 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
GET telegram.org/css/font-roboto.css?1
200 OK 6.2 kB URL GET HTTP/2 telegram.org/css/font-roboto.css?1
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/ksamata_sb_bot?start=id183241449
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type ASCII text, with very long lines (6354), with no line terminators
Hash c06318a1f377e388b69b104b4cefa1a6
151f067aae997487880e573876f96b8d598e64db
1a53363e667fffef8a82588191989d36e680b4d341c6b557e62bf207311a3d70
GET /css/font-roboto.css?1 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 16 Sep 2023 05:28:29 GMT
content-type: text/css
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: W/"63512b7d-1816"
expires: Wed, 20 Sep 2023 05:28:29 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
GET telegram.org/js/tgwallpaper.min.js?3
200 OK 3.0 kB URL GET HTTP/2 telegram.org/js/tgwallpaper.min.js?3
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/ksamata_sb_bot?start=id183241449
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type ASCII text, with very long lines (2998), with no line terminators
Hash f03422dc797fd26a3834b1ec041128ed
a6e88f4fe48b749c2b7360e8e004f64b6cfffb1a
046ec6b7909d0ca5cc6ef271a1b57b2f2be0bd88e3495fd8c496f1524e8ffaac
GET /js/tgwallpaper.min.js?3 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 16 Sep 2023 05:28:29 GMT
content-type: application/javascript
last-modified: Thu, 03 Mar 2022 19:57:25 GMT
etag: W/"62211da5-ba3"
expires: Wed, 20 Sep 2023 05:28:29 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
GET telegram.org/css/bootstrap.min.css?3
200 OK 42 kB URL GET HTTP/2 telegram.org/css/bootstrap.min.css?3
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/ksamata_sb_bot?start=id183241449
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type ASCII text, with very long lines (42164)
Hash c2656e265ef58a9cc9f4b70b15da5fb9
85c5ebdb89d4574d72688c2650d4b84b9b09770a
f1d083ffaa644c708f11db29707aa57c19246e6d32643b03fee3f82c17b224b3
GET /css/bootstrap.min.css?3 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 16 Sep 2023 05:28:29 GMT
content-type: text/css
last-modified: Fri, 10 Nov 2017 17:54:14 GMT
etag: W/"5a05e7c6-a61b"
expires: Wed, 20 Sep 2023 05:28:29 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
GET telegram.org/img/tgme/pattern.svg?1
200 OK 232 kB URL GET HTTP/2 telegram.org/img/tgme/pattern.svg?1
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/ksamata_sb_bot?start=id183241449
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size 232 kB (231706 bytes)
Hash d0c22c6a97023d85ba6e644a41c44a5d
4284efb616c182da4450c123174ce0e81a322845
118add53487c02aaf5b5ab9f69380fa06717deb10492e14aaa487e3c62806ad4
GET /img/tgme/pattern.svg?1 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/css/telegram.css?236
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 16 Sep 2023 05:28:30 GMT
content-type: image/svg+xml
last-modified: Thu, 05 Jan 2023 17:52:04 GMT
etag: W/"63b70e44-3891a"
expires: Wed, 20 Sep 2023 05:28:30 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
GET telegram.org/css/telegram.css?236
200 OK 115 kB URL GET HTTP/2 telegram.org/css/telegram.css?236
IP
ASN #62041 Telegram Messenger Inc
Requested by https://t.me/ksamata_sb_bot?start=id183241449
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type ASCII text, with very long lines (1267)
Size 115 kB (114867 bytes)
Hash 0d209d756face073dd14a437f07e58b2
20cb9119fdd02921a6bd0b1500f78a0b76a7a5c0
acd326a9263ee8c4cbc757fed46333732a0e3f8f48d398cbd4f8e36a09fdaf76
GET /css/telegram.css?236 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sat, 16 Sep 2023 05:28:30 GMT
content-type: text/css
last-modified: Mon, 20 Mar 2023 10:58:55 GMT
etag: W/"64183c6f-1c0b3"
expires: Wed, 20 Sep 2023 05:28:30 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
213.180.204.221
188.166.193.161
149.154.167.99
192.124.249.22