| telegtrbl.lol/cdn-cgi/challenge-platform/scripts/jsd/main.js |  172.67.149.16 | 302 Found | 0 B |
URL telegtrbl.lol/cdn-cgi/challenge-platform/scripts/jsd/main.js IP172.67.149.16:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
date: Thu, 27 Feb 2025 04:05:26 GMT
content-length: 0
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zh%2B6t%2B0nJFn6u4wVJ7Alh3hphkzrhoHDk875Y0T4AF%2FNxerVbi9Zg8geAEGwtkFduYTo7Ve%2BzJzL8VdgDkRZoxpAvnQHIdzXjApZei8qWw9aQv2mP51fpAoKS%2FBKGrpa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91854be5bc8a5689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2941&min_rtt=1118&rtt_var=2019&sent=73&recv=23&lost=0&retrans=0&sent_bytes=62509&recv_bytes=3607&delivery_rate=8724463&cwnd=38400&unsent_bytes=0&cid=3ee5c19985d020f7&ts=857&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/cdn-cgi/challenge-platform/h/b/jsd/r/0.3410210982028969:1740625832:ye1Bo1kkXkpfoVGRS6u64i5WAJhY_o0PLxOsgkDOqaw/91854bddd8745691 | 172.67.149.16 | 200 OK | 0 B |
URL telegtrbl.lol/cdn-cgi/challenge-platform/h/b/jsd/r/0.3410210982028969:1740625832:ye1Bo1kkXkpfoVGRS6u64i5WAJhY_o0PLxOsgkDOqaw/91854bddd8745691 IP172.67.149.16:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.3410210982028969:1740625832:ye1Bo1kkXkpfoVGRS6u64i5WAJhY_o0PLxOsgkDOqaw/91854bddd8745691 HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 12072
Origin: https://telegtrbl.lol
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:26 GMT
content-type: text/plain; charset=UTF-8
content-length: 0
priority: u=3,i=?0
set-cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.telegtrbl.lol; Priority=High; HttpOnly; Secure; SameSite=None
cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38; Path=/; Expires=Fri, 27-Feb-26 04:05:26 GMT; Domain=.telegtrbl.lol; Priority=High; HttpOnly; Secure; SameSite=None; Partitioned
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FdL6EOvaDKUXu%2FCzUibyGtR%2FxhIxi%2BL9gBxmsKdusluDy1D5P23Pyy2TfkepI01bAO488bGMJ1AnXa5COTVq%2FE3ZpuU54u9VPFKbr4VV1uJmCN4aVEjG8d3DRev27CDe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854be6dcc95689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2742&min_rtt=1118&rtt_var=1912&sent=80&recv=35&lost=0&retrans=0&sent_bytes=67974&recv_bytes=16744&delivery_rate=54083&cwnd=38400&unsent_bytes=0&cid=3ee5c19985d020f7&ts=1043&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/files/img/apple-touch-icon.png | 172.67.149.16 | 200 OK | 5.6 kB |
URL telegtrbl.lol/files/img/apple-touch-icon.png IP172.67.149.16:0
File typePNG image data, 180 x 180, 8-bit/color RGB, non-interlaced Hash295ccdb03006b8dfef45090dafbd46ac 491ab660270e47cbac6a5731c51cca71c1c1b2b1 a51d667d4262047c23e3a2a8aac3b46dc8a58c686cc013f2354011c07bf22cf3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /files/img/apple-touch-icon.png HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:26 GMT
content-type: image/png
content-length: 5644
last-modified: Sat, 08 Feb 2025 22:37:41 GMT
etag: "67a7dcb5-160c"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6txJ%2BcD6lgl1qJ6Oyw%2B%2FBQ4hRxY3yYrHtyIQnRTWAl5OJesAYBQ0qP8OC6rF%2Bw6l7SPRmxAW7xUufwl9e2yQu%2FFWpmz50dvrb3w2EQOcHYqydHQVlnS%2BTkY3lfhSHd8C"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91854be6fcda5689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3038&min_rtt=1118&rtt_var=2524&sent=93&recv=41&lost=0&retrans=0&sent_bytes=79555&recv_bytes=18635&delivery_rate=66417&cwnd=38400&unsent_bytes=0&cid=3ee5c19985d020f7&ts=1445&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/files/img/website_icon.svg | 172.67.149.16 | 200 OK | 7.9 kB |
URL telegtrbl.lol/files/img/website_icon.svg IP172.67.149.16:0
File typeSVG Scalable Vector Graphics image Hash02f7553e1ac3129cd1c4d0442b5a0f81 0dd8634450681fe1a2d0c1e5b02d6d0954e2772d 0019255c610cb0843c524d7995905fa5201651fcc393846bee8414f0610097f5
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /files/img/website_icon.svg HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:26 GMT
content-type: image/svg+xml
last-modified: Sat, 08 Feb 2025 22:37:41 GMT
etag: W/"67a7dcb5-768"
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ylMQaxUKB%2F95d7vqoVa9ML9D7wAnRctdAKSPji4tYhCpNLSFyyaP2pytyMAbWq7N5gnSu4U5eScagCXrlVstXZDFYl4hPy%2FaF8WPMYt%2BP3sVVXUS9V5nVzkdBrcHnyEM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91854be6fcdb5689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2828&min_rtt=1118&rtt_var=2312&sent=99&recv=42&lost=0&retrans=0&sent_bytes=86033&recv_bytes=18681&delivery_rate=2953774&cwnd=38400&unsent_bytes=0&cid=3ee5c19985d020f7&ts=1460&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js? | 172.67.149.16 | 200 OK | 16 kB |
URL telegtrbl.lol/cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js? IP172.67.149.16:0
File typeJavaScript source, ASCII text, with very long lines (8443), with no line terminators Hash7a05e3c31f9aa927ede934b6e9b84a0c 134ab26ddfd22606aee23126d02d46243311937f dbb503c9cd70bacc7c1a0e222539c9e8fdbf53058b1056c362d4d3790518fb6a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/b0e4a89976ce/main.js? HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:26 GMT
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5gseEqDa%2BTP7vXIHofdcW8dTV5tbIZRP2ftpBBQ7RFCGFyPzphQhW%2Fv%2F%2BjpY7bZn7Ket7zbDhzzUMTbfgUDeFZZXiFdizLt43092f7GA8W5MEqzikfN54Ve3EyYb5mVy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91854be5cc8e5689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2941&min_rtt=1118&rtt_var=2019&sent=75&recv=24&lost=0&retrans=0&sent_bytes=63258&recv_bytes=3872&delivery_rate=8724463&cwnd=38400&unsent_bytes=0&cid=3ee5c19985d020f7&ts=870&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/js/files/8940838e7dddc787d8.html | 172.67.149.16 | 200 OK | 49 kB |
URL telegtrbl.lol/js/files/8940838e7dddc787d8.html IP172.67.149.16:0
File typegzip compressed data, max compression, from Unix Hashfcf0262beb96c58fd7aeb5c0bb8fc4af 22c51ed3eb77fc79ac3fe8131f8cb08c9afd532e e81ea8894a34c2673dc7e7afa5055eded2622f15dab8f452ea79c240c6969f3f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/files/8940838e7dddc787d8.html HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/js/tgsticker-worker.js
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:28 GMT
content-type: text/html
last-modified: Sat, 08 Feb 2025 22:37:41 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CP0H%2B%2Bk5FSnF%2BwHEgYd2f7vCKd0pYJu0PsSiZNSTwSC%2FrYQZDPPxePzVzLIemzA7pclfQXEfH%2F0TrayWkxAztXVVBQW2XBfHSswLJ6803PbKKOSu0nzQ6KzhXZosgqJk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854bf4b9355689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1913&min_rtt=842&rtt_var=1188&sent=487&recv=98&lost=0&retrans=0&sent_bytes=497131&recv_bytes=31810&delivery_rate=7313820&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=3655&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/js/tgsticker-worker.js | 172.67.149.16 | 200 OK | 27 kB |
URL telegtrbl.lol/js/tgsticker-worker.js IP172.67.149.16:0
File typegzip compressed data, from Unix Hasha4ae47c031c613d6f5e9a1107d7dd97f 6dd67b3182e622d8091d3ab5b2f72f65c362eef1 6d400cb5953e739095351a21f91e1cbc5c53009117bc81c2ca4b80ac7ffaa742
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/tgsticker-worker.js HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:26 GMT
content-type: application/javascript
last-modified: Sat, 08 Feb 2025 22:37:41 GMT
vary: Accept-Encoding
etag: W/"67a7dcb5-1731"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1oiT98vyHfu9686qSUwiHVDNor729Y2oOezcoy4gQDzFEHWW3ecuxvDgGgkLCKWpx8n76L0WqD3zFlMkoF63SYi%2BzXPSzVMjztoR5yEorOIF2RYveJckBGa5FEGJiP0Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854be59c825689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3520&min_rtt=1118&rtt_var=2991&sent=82&recv=38&lost=0&retrans=0&sent_bytes=69118&recv_bytes=17967&delivery_rate=35945&cwnd=38400&unsent_bytes=0&cid=3ee5c19985d020f7&ts=1234&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| tong1.bu-e.top/api/send | 104.21.36.154 | 204 No Content | 0 B |
IP104.21.36.154:443
CertificateIssuerGoogle Trust Services Subjectbu-e.top Fingerprint2B:B5:8C:50:02:A3:26:B3:70:0A:E0:63:64:C5:ED:A0:DE:6F:44:2C ValidityTue, 11 Feb 2025 19:10:41 GMT - Mon, 12 May 2025 20:09:19 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/send HTTP/1.1
Host: tong1.bu-e.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://telegtrbl.lol/
Origin: https://telegtrbl.lol
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
date: Thu, 27 Feb 2025 04:05:32 GMT
content-length: 0
x-dns-prefetch-control: on
content-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self' undefined
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: content-type
access-control-max-age: 86400
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UeT%2FK66cEgow07vfhVHsg%2BaJnK58SiS7IMclA%2FE8OXjgXjDzCrs36FtW1yuwgKyRr57bSmDOFblhR6PVuDW5Bwg%2BuST7E2d9q8Upr8R57IG2iMXBSBgt1qHaJRmiTh70lQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854c0c1a6f56c5-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=4269&min_rtt=4243&rtt_var=1609&sent=13&recv=8&lost=0&retrans=0&sent_bytes=4140&recv_bytes=1206&delivery_rate=139963&cwnd=12000&unsent_bytes=0&cid=77015517ccb0c8c2&ts=572&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/js/tgsticker-worker.js | 172.67.149.16 | 200 OK | 39 kB |
URL telegtrbl.lol/js/tgsticker-worker.js IP172.67.149.16:0
File typegzip compressed data, from Unix Hash2542fd51a65ec2e6a37d721fc9c53316 989d09088e47d5f151634c858371aeaa26212567 b19f09a068616d045fbfddf9939e753ea2e308581588e543c7c8d8c5b3ef06b3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/tgsticker-worker.js HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:28 GMT
content-type: application/javascript
last-modified: Sat, 08 Feb 2025 22:37:41 GMT
vary: Accept-Encoding
etag: W/"67a7dcb5-1731"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 2
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5sPs3w6M1Bdajht%2FnjoW1S7Zx1ugYWshnEKb0OMtbDhJtX3z7kyHOBhVoIQM3rjfVA4PkcEWeDMQH%2Bo2tz2ml%2FAGawlYcNlGmaMH%2Be08Y%2FzKRiDUOfo1YQ0psubWBnc4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854bf378ae5689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1230&min_rtt=842&rtt_var=456&sent=273&recv=68&lost=0&retrans=0&sent_bytes=268202&recv_bytes=22471&delivery_rate=9407396&cwnd=38400&unsent_bytes=0&cid=3ee5c19985d020f7&ts=3062&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/js/files/7604effa1e02ddf7f9.html | 172.67.149.16 | 200 OK | 33 kB |
URL telegtrbl.lol/js/files/7604effa1e02ddf7f9.html IP172.67.149.16:0
File typegzip compressed data, max compression, from Unix Hash22fc89b07d3463221776fe84924f0093 ec315241af796928056aa2408759a5dd502a47ed e3327b49b4abb4c0919ac93668e7ad15bbc6fbd3741fadb82a7dcb6d70175f15
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /js/files/7604effa1e02ddf7f9.html HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/js/tgsticker-worker.js
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:28 GMT
content-type: text/html
last-modified: Sat, 08 Feb 2025 22:37:41 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uAusOgBfN%2Bqmiz68BTx8uXI0aj63gD6X%2B9Ezv8IigpAYS%2FBXPKfz7WF6MxvssbCGuzqJPtUj%2B7C8FP0QuD8la3GjX3s8BubQ%2BmOQ8%2BnYoiTW7KtVy9e7giYRo%2BdIXYYz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854bf4a9315689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1449&min_rtt=842&rtt_var=413&sent=438&recv=93&lost=0&retrans=0&sent_bytes=441731&recv_bytes=31581&delivery_rate=54538&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=3628&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js | 172.67.149.16 | 200 OK | 23 kB |
URL GET HTTP/3telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js IP172.67.149.16:443
CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
File typegzip compressed data, from Unix Hashacfd42e7a31ae3ca68d0b695cf3f0cf1 ce5486c9f20e68ee48584c750b914055d8afb7f5 ac992fa4ec54cbd29a1ba4127b92380fe58f031213b6d8d6735645a78bde83a7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/2976.4e6e9b1254ce313f06c5.js HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:35 GMT
content-type: application/javascript
last-modified: Sat, 08 Feb 2025 22:37:40 GMT
vary: Accept-Encoding
etag: W/"67a7dcb4-3878"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oBHViXaSGC%2By%2BuoVwMwHp%2BODqSbefErpEK6usZK3MVqD5A59Zt3ue3JI3ks8b9MFEsH9qUJo%2FhfGRsgpoRipLmAJ9WMJnN7hupBmSK1x7A1CD4onZBtO9%2B2I5jz31jxf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854c1e2e8e5689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1485&min_rtt=842&rtt_var=453&sent=705&recv=132&lost=0&retrans=0&sent_bytes=729622&recv_bytes=41502&delivery_rate=36100&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=10119&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/k/redirect.js | 172.67.149.16 | 200 OK | 325 B |
URL GET HTTP/3telegtrbl.lol/k/redirect.js IP172.67.149.16:443
CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
File typeASCII text, with very long lines (336), with no line terminators Hash0f4bee764cf7e7080cc0c1a836d6c85a 7cdea3a612218fe6898aa117eb4598d7d0dce420 9d8ec261dba46e501288de7aee04435dfe1d8728b0bf65a4a79c08e5c90a5b54
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/redirect.js HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:31 GMT
content-type: application/javascript
last-modified: Sat, 08 Feb 2025 22:37:41 GMT
etag: W/"67a7dcb5-145"
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mG54zucpppRN2fAUJ%2BZr1NOLnKi2aQp%2FEvT%2B0ziTvd17bGhg3r5fTkE8f4JNgA5XGAN7dtJgBkVuzczavl%2BsSUxvASe8vWoSl1O7rF0AJ1hPU9p2n0Ve1wdIj538co8P"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91854c035e325689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2084&min_rtt=842&rtt_var=1072&sent=561&recv=111&lost=0&retrans=0&sent_bytes=572926&recv_bytes=35057&delivery_rate=8985&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=5979&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/k/main.d54bfa037348b154a941.js | 172.67.149.16 | 200 OK | 296 kB |
URL GET HTTP/3telegtrbl.lol/k/main.d54bfa037348b154a941.js IP172.67.149.16:443
CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
Size296 kB (296503 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/main.d54bfa037348b154a941.js HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:31 GMT
content-type: application/javascript
last-modified: Sat, 08 Feb 2025 22:37:41 GMT
vary: Accept-Encoding
etag: W/"67a7dcb5-48637"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4vC%2B11fjhrvV7FO9a6fru1S8xHg3Ig3%2Fc2BMtdMtBcP00PnnX29j9lMeauYgKNN%2B%2FRYxHrBfVckD9RqpV3wHaCsn44QwNn8B6zIJ877%2F3kS08vQUz8tWMCdxWZllugdH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854c035e345689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2084&min_rtt=842&rtt_var=1072&sent=534&recv=111&lost=0&retrans=0&sent_bytes=540711&recv_bytes=35057&delivery_rate=8985&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=5978&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/k/7784.df07a876b22e3b2a83e9.js | 172.67.149.16 | 200 OK | 22 kB |
URL GET HTTP/3telegtrbl.lol/k/7784.df07a876b22e3b2a83e9.js IP172.67.149.16:443
Requested byhttps://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
File typeJavaScript source, ASCII text, with very long lines (21340) Hasha0980d43cea486530c30f9f5e1c1b5e4 deec93f70f8b813b479137075afa6a0a3a25b8bd 4b5eeb1400e5118a1aff286d9a6cf893bd7c08fc8247c62116238ea587890e9e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/7784.df07a876b22e3b2a83e9.js HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:35 GMT
content-type: application/javascript
last-modified: Sat, 08 Feb 2025 22:37:40 GMT
vary: Accept-Encoding
etag: W/"67a7dcb4-53e5"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vyB4JQ25Yd2gKfHMNYobAkEF3VR9COM5pyMSTCzqB518ojkfgqbhH353cLkwOxk6Wd%2BaH2Jba5TSPRM3V%2FPjL7tp7XCEE8uWhXzCNVj%2B0Joo35dIA3yK7UAx9YsKgvwt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854c1fbf0a5689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1397&min_rtt=842&rtt_var=315&sent=738&recv=139&lost=0&retrans=0&sent_bytes=761357&recv_bytes=44007&delivery_rate=25228&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=10523&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/k/7784.df07a876b22e3b2a83e9.js | 172.67.149.16 | 200 OK | 22 kB |
URL GET HTTP/3telegtrbl.lol/k/7784.df07a876b22e3b2a83e9.js IP172.67.149.16:443
Requested byhttps://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
File typeJavaScript source, ASCII text, with very long lines (21340) Hasha0980d43cea486530c30f9f5e1c1b5e4 deec93f70f8b813b479137075afa6a0a3a25b8bd 4b5eeb1400e5118a1aff286d9a6cf893bd7c08fc8247c62116238ea587890e9e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/7784.df07a876b22e3b2a83e9.js HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:35 GMT
content-type: application/javascript
last-modified: Sat, 08 Feb 2025 22:37:40 GMT
vary: Accept-Encoding
etag: W/"67a7dcb4-53e5"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w2mAPMtsOOBn47MIirBvf3oPDKBfJZthzbH8XS5gdO4bst6T%2Bw1N0fiiXa5tvW%2BS2l4IB2UubwN21rmclM3uR8THk5Qe3ojOzj5JF82fdO5Tz%2FZfQwec2ahmmL8AlPAG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854c1fcf165689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1375&min_rtt=842&rtt_var=240&sent=755&recv=142&lost=0&retrans=0&sent_bytes=779632&recv_bytes=44690&delivery_rate=5448040&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=10541&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/k/compatTest.js | 172.67.149.16 | 200 OK | 2.5 kB |
URL GET HTTP/3telegtrbl.lol/k/compatTest.js IP172.67.149.16:443
CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
File typeJavaScript source, ASCII text, with very long lines (2610), with no line terminators Hash6cfbdd49583de4aef06544f30e1eafb9 b852473e5433f95a06bf58c7e625876a14358422 9f053b9be11ee313213aaf4d5269f4a011e068ed6eaf12a557634381fc42c9ec
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/compatTest.js HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:31 GMT
content-type: application/javascript
last-modified: Sat, 08 Feb 2025 22:37:40 GMT
vary: Accept-Encoding
etag: W/"67a7dcb4-9f0"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OsSjMakl7AwDSqSVhY5bWhMSzmZ%2BE8QFdrVu8JWdyi5CxAfEx8k0UIPz1TEa%2BiGnKLSZLDD%2B9TtvYyr0vQeqL%2BUyjV7dd8pjkytXJ2XGE1bbmVKlJtWxCqL8k7svSNhq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854c035e385689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2184&min_rtt=842&rtt_var=1003&sent=562&recv=112&lost=0&retrans=0&sent_bytes=573799&recv_bytes=35103&delivery_rate=84701&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=5989&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/k/7784.df07a876b22e3b2a83e9.js | 172.67.149.16 | 200 OK | 22 kB |
URL GET HTTP/3telegtrbl.lol/k/7784.df07a876b22e3b2a83e9.js IP172.67.149.16:443
Requested byhttps://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
File typeJavaScript source, ASCII text, with very long lines (21340) Hasha0980d43cea486530c30f9f5e1c1b5e4 deec93f70f8b813b479137075afa6a0a3a25b8bd 4b5eeb1400e5118a1aff286d9a6cf893bd7c08fc8247c62116238ea587890e9e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/7784.df07a876b22e3b2a83e9.js HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:35 GMT
content-type: application/javascript
last-modified: Sat, 08 Feb 2025 22:37:40 GMT
vary: Accept-Encoding
etag: W/"67a7dcb4-53e5"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ftNr%2BN5BnoA85zasb6N7S8LPLvqKtLIYvCazBvOSrAm8HzNvGlCWsGmSTlLU5TjwRZ%2F5ElrtMk2MO5iyUkRWUtHaNjlWqnreMGRHohzMTRtO4r40RSrzjFPru0N1wAf0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854c1fbf125689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1402&min_rtt=842&rtt_var=248&sent=746&recv=140&lost=0&retrans=0&sent_bytes=770481&recv_bytes=44053&delivery_rate=579745&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=10529&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/k/8673.1b6dd8d303b0535cc1f8.js | 172.67.149.16 | 200 OK | 11 kB |
URL GET HTTP/3telegtrbl.lol/k/8673.1b6dd8d303b0535cc1f8.js IP172.67.149.16:443
CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
File typeJavaScript source, ASCII text, with very long lines (10642) Hashea8d5208dada45e8d0844877a7c93db6 45d98fbe3dae09a988cccd836d39016c5100f313 25f447387cefb643c04e0aa816e21edf562ebe9b7e3f7b808bdb179154fc17b8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/8673.1b6dd8d303b0535cc1f8.js HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:35 GMT
content-type: application/javascript
last-modified: Sat, 08 Feb 2025 22:37:40 GMT
vary: Accept-Encoding
etag: W/"67a7dcb4-29c8"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C550itsy3T8DOat%2BrOa%2FXRQFV3KHzGD2G4WZFMU4%2FQKe2OQ0xdTPuv3WJzWUEK4O2ENqDDg0QZISaZHT%2FQVEdNe9y2HeRa3I0y5Zs0sXKNUjaIzTJ81hncATMvW086ms"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854c1b7d8b5689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1545&min_rtt=842&rtt_var=640&sent=689&recv=125&lost=0&retrans=0&sent_bytes=717227&recv_bytes=38510&delivery_rate=895769&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=9857&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/k/rlottie-wasm.f013598f1b2ba719f25e.js | 172.67.149.16 | 200 OK | 66 kB |
URL GET HTTP/3telegtrbl.lol/k/rlottie-wasm.f013598f1b2ba719f25e.js IP172.67.149.16:443
Requested byhttps://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash4441938ee433d3657c20d454d352a336 dd67121d7fda7c17be196f60c72dfa06bcb5bc6f 659bf63501a8054ef0eedda3dec466dbc1e9a1b2c4d5d59a285b005215e16679
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/rlottie-wasm.f013598f1b2ba719f25e.js HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:36 GMT
content-type: application/javascript
last-modified: Sat, 08 Feb 2025 22:37:41 GMT
vary: Accept-Encoding
etag: W/"67a7dcb5-10037"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dnvr4jme54ZNULN6VdWFVDDCBGsNzjRSS%2BpJBqAetVzZEQEK1nilTfuQQWPwG2%2BynOBRmN5VWHuMg0larsHpFmKdoBdCy6%2Bny8hWWIJXaJZHiJxS0Gl1ru3dn0up6z9y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854c25f93b5689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1404&min_rtt=755&rtt_var=329&sent=918&recv=155&lost=0&retrans=0&sent_bytes=963420&recv_bytes=48583&delivery_rate=9176199&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=11732&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| tong1.bu-e.top/script.js | 104.21.36.154 | 200 OK | 2.6 kB |
IP104.21.36.154:443
CertificateIssuerGoogle Trust Services Subjectbu-e.top Fingerprint2B:B5:8C:50:02:A3:26:B3:70:0A:E0:63:64:C5:ED:A0:DE:6F:44:2C ValidityTue, 11 Feb 2025 19:10:41 GMT - Mon, 12 May 2025 20:09:19 GMT
File typeJavaScript source, ASCII text, with very long lines (2730), with no line terminators Hash397246636abae7979e39b0e891c9b30f 32f6895b08a54ca90f02a48aa3716467cfba4d55 e6d6622e36c040d3578a25ddc965f5c268942ebd0e1fac6e2e5a8496e4020503
GET /script.js HTTP/1.1
Host: tong1.bu-e.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Feb 2025 04:05:31 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: on
content-security-policy: default-src 'self';img-src * data:;script-src 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'unsafe-inline';connect-src 'self' api.umami.is cloud.umami.is;frame-ancestors 'self' undefined
access-control-allow-origin: *
cache-control: public, max-age=86400, must-revalidate
accept-ranges: bytes
last-modified: Sun, 15 Dec 2024 00:50:05 GMT
etag: W/"a53-193c7cb3a48"
vary: Accept-Encoding
content-encoding: gzip
age: 7737
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vw8NY1SMJRR7rvThTLzDYM%2BLlmEYS3mzn1%2FEoVatgA8YS9%2FyaVigs71qykFpVzS3gcAXSxqXmkoErPZZa2WL%2F7EfdOrVM23H0yPUW0%2FUTKtIZAZ9w1jwglqat9Y6ti%2FG0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854c058aa056ae-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=523&min_rtt=466&rtt_var=159&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3261&recv_bytes=1189&delivery_rate=7337837&cwnd=253&unsent_bytes=0&cid=c9f9d70db25226d0&ts=47&x=0"
X-Firefox-Spdy: h2
|
|
| telegtrbl.lol/k/5905.db5d2749ecb90aaf2752.js | 172.67.149.16 | 200 OK | 140 kB |
URL GET HTTP/3telegtrbl.lol/k/5905.db5d2749ecb90aaf2752.js IP172.67.149.16:443
Requested byhttps://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size140 kB (140233 bytes) Hashfdd268f67cf5c4f79320041e3d156e98 d66194ee702467dd19130dee59bd824990f5bc71 36e5ef6880e869bdf9ef2119932dbac7330513aefc50839cc2a6fdde7b519967
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/5905.db5d2749ecb90aaf2752.js HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:36 GMT
content-type: application/javascript
last-modified: Sat, 08 Feb 2025 22:37:40 GMT
vary: Accept-Encoding
etag: W/"67a7dcb4-223c9"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pU3SEs2lYJfWN6sce6AC8KzeQG7Z%2BmVVC1hKBtM9T%2BOi8AOaaQbpqZ9UN2ABAr1UTibCRI0H%2FcwSVU1NCptI5owsYyFKwFpok823phZKokz6ouoaYeTt76rjEFvGg3lF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854c225fed5689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1378&min_rtt=842&rtt_var=185&sent=797&recv=146&lost=0&retrans=0&sent_bytes=826571&recv_bytes=45966&delivery_rate=68860&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=11103&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/k/5905.db5d2749ecb90aaf2752.js | 172.67.149.16 | 200 OK | 140 kB |
URL GET HTTP/3telegtrbl.lol/k/5905.db5d2749ecb90aaf2752.js IP172.67.149.16:443
Requested byhttps://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size140 kB (140233 bytes) Hashfdd268f67cf5c4f79320041e3d156e98 d66194ee702467dd19130dee59bd824990f5bc71 36e5ef6880e869bdf9ef2119932dbac7330513aefc50839cc2a6fdde7b519967
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/5905.db5d2749ecb90aaf2752.js HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:36 GMT
content-type: application/javascript
last-modified: Sat, 08 Feb 2025 22:37:40 GMT
vary: Accept-Encoding
etag: W/"67a7dcb4-223c9"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a%2FymAWM53Lu0qbYtEiZZiP8R6ErSSjROeRl9sKTQgEcrlSFJpCiDIMukrotCX%2Bx2lk80hGlFkmu5LytjXgHDDgj19oek12xbOW3T%2BxeDIan5IipgVw97q1KYB9MQMRXk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854c223fe05689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1382&min_rtt=842&rtt_var=147&sent=829&recv=147&lost=0&retrans=0&sent_bytes=864331&recv_bytes=46012&delivery_rate=17892139&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=11106&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/k/main.949acaf34f3882f511ff.css | 172.67.149.16 | 200 OK | 113 kB |
URL GET HTTP/3telegtrbl.lol/k/main.949acaf34f3882f511ff.css IP172.67.149.16:443
CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
Size113 kB (113301 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/main.949acaf34f3882f511ff.css HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:31 GMT
content-type: text/css
last-modified: Sat, 08 Feb 2025 22:37:41 GMT
vary: Accept-Encoding
etag: W/"67a7dcb5-1ba95"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LplcfqaPgNo%2FFg3728Sr1w3SP1%2FCg%2Fat5gLwLNSyuZDYs7Ix61%2BB3N0khXCJt4UuHYMFl4kriwRHledkjK9IYpZ1%2FXzrwusUrIUiJQW6M4cYbkTGVVXjF5KzfYq2rsdj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854c035e355689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1972&min_rtt=842&rtt_var=916&sent=606&recv=114&lost=0&retrans=0&sent_bytes=625883&recv_bytes=35194&delivery_rate=22486322&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=6187&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/k/rlottie-wasm.f013598f1b2ba719f25e.js | 172.67.149.16 | 200 OK | 66 kB |
URL GET HTTP/3telegtrbl.lol/k/rlottie-wasm.f013598f1b2ba719f25e.js IP172.67.149.16:443
Requested byhttps://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash4441938ee433d3657c20d454d352a336 dd67121d7fda7c17be196f60c72dfa06bcb5bc6f 659bf63501a8054ef0eedda3dec466dbc1e9a1b2c4d5d59a285b005215e16679
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/rlottie-wasm.f013598f1b2ba719f25e.js HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:36 GMT
content-type: application/javascript
last-modified: Sat, 08 Feb 2025 22:37:41 GMT
vary: Accept-Encoding
etag: W/"67a7dcb5-10037"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4BZ0V4y4dTOw%2B4yHRQodQnqdjhQU5TvU1zKt10g51nRTY2Ajx4GQdBxhVs1TOnBcPCq0d1fpeoHNO4wqh%2Bz80Jm5FaKIhCeh3vj%2FJy2P0EaHsMAA7p7jpEfwTY7r7Z6g"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854c26093e5689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1404&min_rtt=755&rtt_var=329&sent=938&recv=155&lost=0&retrans=0&sent_bytes=986838&recv_bytes=48583&delivery_rate=9176199&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=11732&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| | 172.67.149.16 | 200 OK | 15 kB |
URL User Request GET HTTP/2IP172.67.149.16:443
CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 27 Feb 2025 04:05:25 GMT
content-type: text/html
last-modified: Sat, 08 Feb 2025 22:37:41 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4%2BcLRNYv6quGqKT9kfDCuIMtZdVAPz8op4%2BvotEJJT1yW0lfRVPdroeyQRXW6wHco1OUQjHNqgzVaivQxdOPVEkWRinf%2BVVn9rfdasBbsxf8FsBQEMtFg0MfHrXKgSub"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854bddd8745691-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5923&min_rtt=543&rtt_var=10793&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3275&recv_bytes=1250&delivery_rate=6621951&cwnd=254&unsent_bytes=0&cid=916aa8b8b1afcde6&ts=425&x=0"
X-Firefox-Spdy: h2
|
|
| telegtrbl.lol/k/notification.mp3 | 172.67.149.16 | 206 Partial Content | 11 kB |
URL GET HTTP/3telegtrbl.lol/k/notification.mp3 IP172.67.149.16:443
CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
File typeAudio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo Hasheba09b6a457792c52fc610b5f9f974b3 95e6e0f7648e28ea21bc434054ea59aba3a35aea 86093551f5a7f68c7dcac947bd8dc54c6a79dd9a5d83f7e40116d640eb28c7d6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/notification.mp3 HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: audio
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 206 Partial Content
date: Thu, 27 Feb 2025 04:05:32 GMT
content-type: audio/mpeg
content-length: 10880
last-modified: Sat, 08 Feb 2025 22:37:41 GMT
etag: "67a7dcb5-2a80"
cache-control: max-age=14400
cf-cache-status: MISS
content-range: bytes 0-10879/10880
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ijuLiaOh%2Bx25bgnp%2Bpb%2B1crCULbmljYsf7e6J%2BnxKCChdV9B8zV88JmUmcOj7MSdoMWPCHbo5gP%2FrVp3Ug16lBBV%2FhcK1Umy9QxrueQVZ1kyRhSCC%2B8yM%2FC7Md2Mjxiu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91854c08dfd25689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1762&min_rtt=842&rtt_var=706&sent=672&recv=121&lost=0&retrans=0&sent_bytes=700214&recv_bytes=37811&delivery_rate=60303&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=6859&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/k/5905.db5d2749ecb90aaf2752.js | 172.67.149.16 | 200 OK | 140 kB |
URL GET HTTP/3telegtrbl.lol/k/5905.db5d2749ecb90aaf2752.js IP172.67.149.16:443
Requested byhttps://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size140 kB (140233 bytes) Hashfdd268f67cf5c4f79320041e3d156e98 d66194ee702467dd19130dee59bd824990f5bc71 36e5ef6880e869bdf9ef2119932dbac7330513aefc50839cc2a6fdde7b519967
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/5905.db5d2749ecb90aaf2752.js HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:36 GMT
content-type: application/javascript
last-modified: Sat, 08 Feb 2025 22:37:40 GMT
vary: Accept-Encoding
etag: W/"67a7dcb4-223c9"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pZMHKXppp9D%2BQ4cNuqd91vMBonjd607EA8AdPTNhsN%2F9mAnVKJxfu9ZBFMAbkexY56mBocYtjH5bOdGfvrRd9EI3FVWwLoBXINuAaCf8dfizalK708ECjynYUbWz2GMe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854c221fd55689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1363&min_rtt=842&rtt_var=205&sent=765&recv=145&lost=0&retrans=0&sent_bytes=788810&recv_bytes=45920&delivery_rate=1280698&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=11098&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/k/5905.db5d2749ecb90aaf2752.js | 172.67.149.16 | 200 OK | 140 kB |
URL GET HTTP/3telegtrbl.lol/k/5905.db5d2749ecb90aaf2752.js IP172.67.149.16:443
Requested byhttps://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size140 kB (140233 bytes) Hashfdd268f67cf5c4f79320041e3d156e98 d66194ee702467dd19130dee59bd824990f5bc71 36e5ef6880e869bdf9ef2119932dbac7330513aefc50839cc2a6fdde7b519967
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/5905.db5d2749ecb90aaf2752.js HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:36 GMT
content-type: application/javascript
last-modified: Sat, 08 Feb 2025 22:37:40 GMT
vary: Accept-Encoding
etag: W/"67a7dcb4-223c9"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F542MKTNF9B7zbY9pJpXzBqvPhhCQgajZgUKyYyjDiY6gX%2BCunfe1ZKecC%2BHBMV6HQa6iQNNWt2YNkxrMAy%2Bb3cKECVuvsejjSmmUn5%2F3wSJCfvDTaOXDw6wSM9y%2FEjn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854c224fe25689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1436&min_rtt=842&rtt_var=218&sent=861&recv=148&lost=0&retrans=0&sent_bytes=902094&recv_bytes=46058&delivery_rate=10809917&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=11113&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| | 172.67.149.16 | 200 OK | 2.8 kB |
URL User Request GET HTTP/3IP172.67.149.16:443
CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
File typeHTML document, ASCII text, with very long lines (2898), with no line terminators Hash2d2c2b2ccd50900722f11f5223165627 778f69052fbc4058ecb69c2915fb32cc14223434 4c5cee97b30adc53b334bcc3f6817c52088ea2d845b6e9600d6ddb2a55911706
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/ HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:30 GMT
content-type: text/html
last-modified: Sat, 08 Feb 2025 22:37:41 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
priority: u=1,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JUs8QnMDi%2FTq5ykIvc9NaSc8WdJD4M1wWtpKheogbcs1gYLT7AxdiIdFqCwB8mrjJqc9dMaBkYnjVk0e1ju8cqGFYBybg%2BEnX7LsnjMPo28cO7t3G9TE5g4xGC5molLF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854c01bdb95689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=2225&min_rtt=842&rtt_var=1055&sent=528&recv=106&lost=0&retrans=0&sent_bytes=538766&recv_bytes=32749&delivery_rate=1055&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=5535&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/k/favicon.svg | 172.67.149.16 | 200 OK | 892 B |
URL GET HTTP/3telegtrbl.lol/k/favicon.svg IP172.67.149.16:443
CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
File typeSVG Scalable Vector Graphics image Hashfbfd454715d8180275b32bd48770a483 0716abb57416f83cfad3e17ff830039c0607b313 788c238be3597ef42c549caff599bb84e584790f43f7d6013d6a1987264bdbe1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/favicon.svg HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:32 GMT
content-type: image/svg+xml
last-modified: Sat, 08 Feb 2025 22:37:40 GMT
etag: W/"67a7dcb4-37c"
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UHA96Ir9r771CGhlbK5pQ600nfZD0utaiyqdo9yNG1wQZj55UHqbpBaeeak8%2FIL6zfRDpltDs1tk1qcmS4W0x%2FY3WRUyPk1KVRxvMf19aFucYHv%2F3ifT%2B2OFPBJtpv3k"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91854c0ab8705689-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1627&min_rtt=842&rtt_var=636&sent=686&recv=123&lost=0&retrans=0&sent_bytes=715923&recv_bytes=37903&delivery_rate=1837836&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=7179&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/k/rlottie-wasm.f013598f1b2ba719f25e.js | 172.67.149.16 | 200 OK | 66 kB |
URL GET HTTP/3telegtrbl.lol/k/rlottie-wasm.f013598f1b2ba719f25e.js IP172.67.149.16:443
Requested byhttps://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash4441938ee433d3657c20d454d352a336 dd67121d7fda7c17be196f60c72dfa06bcb5bc6f 659bf63501a8054ef0eedda3dec466dbc1e9a1b2c4d5d59a285b005215e16679
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/rlottie-wasm.f013598f1b2ba719f25e.js HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:36 GMT
content-type: application/javascript
last-modified: Sat, 08 Feb 2025 22:37:41 GMT
vary: Accept-Encoding
etag: W/"67a7dcb5-10037"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TSeRrRbtuquyGToxGYuvotf5Dc1mSKickI21Pk4Fy8DKD5DTUxaBdNC5Aii8c1qJI%2BigTr0LNVnMEymDJDVuUbD9vNJGKbKDFMTdIduJPgyIL%2FYaFwPY0aSD1tG4M3Ok"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854c25f9385689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1350&min_rtt=755&rtt_var=294&sent=898&recv=154&lost=0&retrans=0&sent_bytes=940006&recv_bytes=48537&delivery_rate=2478&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=11716&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/k/rlottie-wasm.f013598f1b2ba719f25e.js | 172.67.149.16 | 200 OK | 66 kB |
URL GET HTTP/3telegtrbl.lol/k/rlottie-wasm.f013598f1b2ba719f25e.js IP172.67.149.16:443
Requested byhttps://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash4441938ee433d3657c20d454d352a336 dd67121d7fda7c17be196f60c72dfa06bcb5bc6f 659bf63501a8054ef0eedda3dec466dbc1e9a1b2c4d5d59a285b005215e16679
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/rlottie-wasm.f013598f1b2ba719f25e.js HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:36 GMT
content-type: application/javascript
last-modified: Sat, 08 Feb 2025 22:37:41 GMT
vary: Accept-Encoding
etag: W/"67a7dcb5-10037"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8ztFgoRsiHfGeT6oidrG8DPGmQgdSgYr5f%2FP574ooS%2B2qit2P8WsikSC%2BYbTC9O0xKLwjDGkl0Yh6kfXYdhXkJOCYyLQlP79HlNqh%2BN3mQi%2B30QoXZ5vSMA2QLtw6nM1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854c26093c5689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1404&min_rtt=755&rtt_var=329&sent=958&recv=155&lost=0&retrans=0&sent_bytes=1010254&recv_bytes=48583&delivery_rate=9176199&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=11734&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/k/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.465390c6e54c60f4a15f.woff2 | 172.67.149.16 | 200 OK | 11 kB |
URL GET HTTP/3telegtrbl.lol/k/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.465390c6e54c60f4a15f.woff2 IP172.67.149.16:443
CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 11016, version 1.0 Hash15fa3062f8929bd3b05fdca5259db412 6ff06a34f68ad0324ddec1bbe4d453c959178b36 5d1bc9b443f3f81fa4b4ad4634c1bb9702194c1898e3a9de0ab5e2cdc0e9f479
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.465390c6e54c60f4a15f.woff2 HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/main.949acaf34f3882f511ff.css
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:31 GMT
content-type: font/woff2
content-length: 11016
last-modified: Sat, 08 Feb 2025 22:37:40 GMT
etag: "67a7dcb4-2b08"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E9qkqzsiSVWUbgV7rIvbvb3ibnohM6vMUsMlm8qldzpeMOrTBj3uoFbQb7MJQlH5lJ0q0aQbK8snDBHjjn1BUJ9Oj%2Fqm0nGBhXT7WvznaKudCbZoXMjqGApuOsTsQoEB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91854c08cfce5689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1839&min_rtt=842&rtt_var=736&sent=661&recv=118&lost=0&retrans=0&sent_bytes=688213&recv_bytes=36598&delivery_rate=15974694&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=6661&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/k/icon-192x192.png | 172.67.149.16 | 200 OK | 3.1 kB |
URL GET HTTP/3telegtrbl.lol/k/icon-192x192.png IP172.67.149.16:443
CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
File typePNG image data, 192 x 192, 8-bit colormap, non-interlaced Hash1a1650d2c76bfc1ac484646c19e495b9 fe58d66042ce9241226f5da9370230285ff604fc 6e587a62c9d7a97f25265ab5eb29d101ad2e36810042a4116d2dd29da96b0bf8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/icon-192x192.png HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:32 GMT
content-type: image/png
content-length: 3059
last-modified: Sat, 08 Feb 2025 22:37:40 GMT
etag: "67a7dcb4-bf3"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uPlrD%2FZevcoAiZHwW808%2F3GE0RsA30MmorGnAw1VZmhD0atN9WGl6cnyk3%2BCAfg5InECSHySBumf0OMWXp3XEdc6oe0C8xI2E3pJHKVrhqIH%2FNzWW2IkwpbbvMEh6qxw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 91854c0ab86c5689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1701&min_rtt=842&rtt_var=650&sent=682&recv=122&lost=0&retrans=0&sent_bytes=712083&recv_bytes=37857&delivery_rate=128098&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=7162&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
| telegtrbl.lol/k/7784.df07a876b22e3b2a83e9.js | 172.67.149.16 | 200 OK | 22 kB |
URL GET HTTP/3telegtrbl.lol/k/7784.df07a876b22e3b2a83e9.js IP172.67.149.16:443
Requested byhttps://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js CertificateIssuerGoogle Trust Services Subjecttelegtrbl.lol Fingerprint40:D6:71:AC:12:49:27:E5:00:6C:56:C4:2B:F6:AA:A7:00:00:7D:0F ValiditySat, 22 Feb 2025 11:53:39 GMT - Fri, 23 May 2025 12:52:24 GMT
File typeJavaScript source, ASCII text, with very long lines (21340) Hasha0980d43cea486530c30f9f5e1c1b5e4 deec93f70f8b813b479137075afa6a0a3a25b8bd 4b5eeb1400e5118a1aff286d9a6cf893bd7c08fc8247c62116238ea587890e9e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /k/7784.df07a876b22e3b2a83e9.js HTTP/1.1
Host: telegtrbl.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegtrbl.lol/k/2976.4e6e9b1254ce313f06c5.js
Cookie: cf_clearance=43SSL_tD.mWbd9f0wVFAsNYkhd_EVIICeaqe804WmCQ-1740629126-1.2.1.1-dv1YMNNcusVlA8l2bUwNoh86FI5emIsBlekVYtAwbEt20dC9Ffj2vCjh461oFXf01NYpxGwuhX9aa.fFyJ6FzSsnJWwLIaNxeatupQSSVGU2CSHsYLekniSRZSryVq71dWFnYZ18PgVl2mm6SBM2T5ChQ5IWTZQexSf8.RuKKYB3s2B9qi_4QnhRnnf8kO0r1RnWOHWr8vOrkwmoC6ygLJK7V0GP3MECXnzSzJT3svKrHnIsKo1vSVN3xtxze4HUT.2NUACgUFSbE8gz2RoIwkUqm3Da41XACHVFGMTKd38
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 27 Feb 2025 04:05:35 GMT
content-type: application/javascript
last-modified: Sat, 08 Feb 2025 22:37:40 GMT
vary: Accept-Encoding
etag: W/"67a7dcb4-53e5"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZKWYQovbu%2BnoOw3JHQ7X1SMno%2Fvbi4PcwzGZt7fk016hq53zDUIkgh%2BIwoyLhC1jTA3g6aSEnwE0we3DOHPUs3ggk3407fovXd0BTqsdBqyQGO0aZF%2FJpOIDf30WFLV9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 91854c1f8eed5689-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=1412&min_rtt=842&rtt_var=379&sent=729&recv=137&lost=0&retrans=0&sent_bytes=752203&recv_bytes=43369&delivery_rate=4604689&cwnd=88800&unsent_bytes=0&cid=3ee5c19985d020f7&ts=10497&x=1", cfExtPri, cfHdrFlush;dur=0
|
|
192.169.69.26