| 72gruq.kafa-climate-forest.de/s6npxq |  172.67.219.92 | 301 Moved Permanently | 520 B |
URL User Request GET 72gruq.kafa-climate-forest.de/s6npxq IP172.67.219.92:80
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s6npxq HTTP/1.1
Host: 72gruq.kafa-climate-forest.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Date: Sun, 06 Apr 2025 04:51:31 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 06 Apr 2025 05:51:31 GMT
Location: https://72gruq.kafa-climate-forest.de/s6npxq
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FDP0Vx3s4m9%2FsB4%2FAP6cUq4l2TyDst8pcAiHIrjoRRmPXcqgysDzRTfjaF52O1QphKM16wR91R7zaGuQZMU5s8Zvloeva8CRNqIHZdbQquKiPg4IbGOgiEErfiUNX8vJONhBVOAbvRewsyOhYVyOPw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 92beabab38cb56a8-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=438&min_rtt=438&rtt_var=219&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=420&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"
|
|
| telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 |  149.154.167.99 | 200 OK | 11 kB |
URL GET telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
Requested byhttps://t.me/DeepFansbot?start=1191863921 CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintC8:B7:84:85:FF:8F:0B:CA:9A:D6:E7:3E:81:F1:1E:94:39:D1:11:0A ValiditySat, 10 Aug 2024 13:33:14 GMT - Thu, 11 Sep 2025 13:33:14 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 11028, version 1.0 Hash1f6d3cf6d38f25d83d95f5a800b8cac3 279f300ca2cbbdf9f5036ef2f438607fbf377daa 796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f
GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://t.me
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 06 Apr 2025 04:51:35 GMT
content-type: application/octet-stream
content-length: 11028
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: "63512b7d-2b14"
expires: Thu, 10 Apr 2025 04:51:35 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| telegram.org/img/tgme/pattern.svg?1 | 149.154.167.99 | 200 OK | 232 kB |
URL GET telegram.org/img/tgme/pattern.svg?1 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
Requested byhttps://t.me/DeepFansbot?start=1191863921 CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintC8:B7:84:85:FF:8F:0B:CA:9A:D6:E7:3E:81:F1:1E:94:39:D1:11:0A ValiditySat, 10 Aug 2024 13:33:14 GMT - Thu, 11 Sep 2025 13:33:14 GMT
File typeSVG Scalable Vector Graphics image Size232 kB (231706 bytes) Hashd0c22c6a97023d85ba6e644a41c44a5d 4284efb616c182da4450c123174ce0e81a322845 118add53487c02aaf5b5ab9f69380fa06717deb10492e14aaa487e3c62806ad4
GET /img/tgme/pattern.svg?1 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/css/telegram.css?244
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 06 Apr 2025 04:51:35 GMT
content-type: image/svg+xml
last-modified: Thu, 05 Jan 2023 17:52:04 GMT
etag: W/"63b70e44-3891a"
expires: Thu, 10 Apr 2025 04:51:35 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 | 149.154.167.99 | 200 OK | 11 kB |
URL GET telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
Requested byhttps://t.me/DeepFansbot?start=1191863921 CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintC8:B7:84:85:FF:8F:0B:CA:9A:D6:E7:3E:81:F1:1E:94:39:D1:11:0A ValiditySat, 10 Aug 2024 13:33:14 GMT - Thu, 11 Sep 2025 13:33:14 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 11040, version 1.0 Hash5e22a46c04d947a36ea0cad07afcc9e1 6091d981c2a4ee975c7f6b56186ee698040bb804 0f53e8b0a717ca4ce313eec62b90d41db62c2f4946259a65c93bf8e84c5b0c44
GET /fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://t.me
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 06 Apr 2025 04:51:35 GMT
content-type: application/octet-stream
content-length: 11040
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: "63512b7d-2b20"
expires: Thu, 10 Apr 2025 04:51:35 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2 | 149.154.167.99 | 200 OK | 6.5 kB |
URL GET telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
Requested byhttps://t.me/DeepFansbot?start=1191863921 CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintC8:B7:84:85:FF:8F:0B:CA:9A:D6:E7:3E:81:F1:1E:94:39:D1:11:0A ValiditySat, 10 Aug 2024 13:33:14 GMT - Thu, 11 Sep 2025 13:33:14 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 6460, version 1.0 Hash491a7a9678c3cfd4f86c092c68480f23 32e18ae407d782adfd54c78c6259c7be52db6bf3 41b5c3b25f4258190937deb900fa57a6db6d450ce7dd2af2259af760119a1c41
GET /fonts/Roboto/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://t.me
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 06 Apr 2025 04:51:35 GMT
content-type: application/octet-stream
content-length: 6460
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: "63512b7d-193c"
expires: Thu, 10 Apr 2025 04:51:35 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 72gruq.kafa-climate-forest.de/s6npxq | 104.21.45.216 | 200 OK | 520 B |
URL User Request GET 72gruq.kafa-climate-forest.de/s6npxq IP104.21.45.216:443
CertificateIssuerGoogle Trust Services Subjectkafa-climate-forest.de FingerprintBD:53:F5:C3:96:A8:3C:3E:77:68:27:E1:D1:F3:F1:1F:1E:E3:E8:98 ValidityFri, 14 Mar 2025 13:13:55 GMT - Thu, 12 Jun 2025 14:11:28 GMT
File typeHTML document, ASCII text, with very long lines (568), with no line terminators Hash202de39e53e5649b48d2265db0998255 1717c0aa11d4daedb6d054c50645c92eb1f3ab71 c68751192c9646a97c2ffe0c409f243c41eabf232ae886ee438367392ab7cf81
GET /s6npxq HTTP/1.1
Host: 72gruq.kafa-climate-forest.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 06 Apr 2025 04:51:32 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
vary: accept-encoding
cf-cache-status: DYNAMIC
content-encoding: br
cf-ray: 92beabab5dfa56c6-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| t.me/DeepFansbot?start=1191863921 | 149.154.167.99 | 200 OK | 12 kB |
URL User Request GET t.me/DeepFansbot?start=1191863921 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
CertificateIssuerGoDaddy.com, Inc. Subject*.t.me FingerprintBA:44:79:96:41:99:29:DF:8F:08:73:A9:D4:90:C4:0D:7D:02:8F:9B ValiditySun, 06 Oct 2024 19:51:28 GMT - Fri, 07 Nov 2025 19:51:28 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /DeepFansbot?start=1191863921 HTTP/1.1
Host: t.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 06 Apr 2025 04:51:33 GMT
content-type: text/html; charset=utf-8
content-length: 4315
set-cookie: stel_ssid=284c06d9b16575a83d_18222302798023216367; expires=Mon, 07 Apr 2025 04:51:33 GMT; path=/; samesite=None; secure; HttpOnly
pragma: no-cache
cache-control: no-store
x-frame-options: ALLOW-FROM https://web.telegram.org
content-security-policy: frame-ancestors https://web.telegram.org
content-encoding: gzip
strict-transport-security: max-age=35768000
X-Firefox-Spdy: h2
|
|
| telegram.org/css/bootstrap.min.css?3 | 149.154.167.99 | 200 OK | 42 kB |
URL GET telegram.org/css/bootstrap.min.css?3 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
Requested byhttps://t.me/DeepFansbot?start=1191863921 CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintC8:B7:84:85:FF:8F:0B:CA:9A:D6:E7:3E:81:F1:1E:94:39:D1:11:0A ValiditySat, 10 Aug 2024 13:33:14 GMT - Thu, 11 Sep 2025 13:33:14 GMT
File typeASCII text, with very long lines (42164) Hashc2656e265ef58a9cc9f4b70b15da5fb9 85c5ebdb89d4574d72688c2650d4b84b9b09770a f1d083ffaa644c708f11db29707aa57c19246e6d32643b03fee3f82c17b224b3
GET /css/bootstrap.min.css?3 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 06 Apr 2025 04:51:33 GMT
content-type: text/css
last-modified: Fri, 10 Nov 2017 17:54:14 GMT
etag: W/"5a05e7c6-a61b"
expires: Thu, 10 Apr 2025 04:51:33 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| telegram.org/css/telegram.css?244 | 149.154.167.99 | 200 OK | 120 kB |
URL GET telegram.org/css/telegram.css?244 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
Requested byhttps://t.me/DeepFansbot?start=1191863921 CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintC8:B7:84:85:FF:8F:0B:CA:9A:D6:E7:3E:81:F1:1E:94:39:D1:11:0A ValiditySat, 10 Aug 2024 13:33:14 GMT - Thu, 11 Sep 2025 13:33:14 GMT
File typeASCII text, with very long lines (1267) Size120 kB (120286 bytes) Hash4e0791b1984bad4ea1508a16f05a6e84 4570b0448ba5948df913ea44a1cc7b1285cb0de3 0cf97183ee212ba10361a59d4341abb0ce8b8631b0adfe4c83c7af8ab1ecec70
GET /css/telegram.css?244 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 06 Apr 2025 04:51:33 GMT
content-type: text/css
last-modified: Thu, 23 Jan 2025 23:18:00 GMT
etag: W/"6792ce28-1d5de"
expires: Thu, 10 Apr 2025 04:51:33 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| telegram.org/img/website_icon.svg?4 | 149.154.167.99 | 200 OK | 1.9 kB |
URL GET telegram.org/img/website_icon.svg?4 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
Requested byhttps://t.me/DeepFansbot?start=1191863921 CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintC8:B7:84:85:FF:8F:0B:CA:9A:D6:E7:3E:81:F1:1E:94:39:D1:11:0A ValiditySat, 10 Aug 2024 13:33:14 GMT - Thu, 11 Sep 2025 13:33:14 GMT
File typeSVG Scalable Vector Graphics image Hash5caca7ae1cffb3da0b06150a15020005 04cfb934f238d33209406393a3fbf78454815739 1ea747a06fbc240c2594a8c523cb248bbda4784f0fcad9d0f06334f1a378604f
GET /img/website_icon.svg?4 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 06 Apr 2025 04:51:35 GMT
content-type: image/svg+xml
last-modified: Mon, 20 Jul 2020 20:41:37 GMT
etag: W/"5f160181-768"
expires: Thu, 10 Apr 2025 04:51:35 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| telegram.org/js/tgwallpaper.min.js?3 | 149.154.167.99 | 200 OK | 3.0 kB |
URL GET telegram.org/js/tgwallpaper.min.js?3 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
Requested byhttps://t.me/DeepFansbot?start=1191863921 CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintC8:B7:84:85:FF:8F:0B:CA:9A:D6:E7:3E:81:F1:1E:94:39:D1:11:0A ValiditySat, 10 Aug 2024 13:33:14 GMT - Thu, 11 Sep 2025 13:33:14 GMT
File typeASCII text, with very long lines (2998), with no line terminators Hashf03422dc797fd26a3834b1ec041128ed a6e88f4fe48b749c2b7360e8e004f64b6cfffb1a 046ec6b7909d0ca5cc6ef271a1b57b2f2be0bd88e3495fd8c496f1524e8ffaac
GET /js/tgwallpaper.min.js?3 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 06 Apr 2025 04:51:33 GMT
content-type: application/javascript
last-modified: Thu, 03 Mar 2022 19:57:25 GMT
etag: W/"62211da5-ba3"
expires: Thu, 10 Apr 2025 04:51:33 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn4.cdn-telegram.org/file/WF6Lc9h7pgHLtt5gBe5egvdfgLc1_fEotft3x5E4NKUEGn0GcLvYJnOKCrJ1EbPykbyTGHoCPBff-rrT-GFix5D_zX4LtKVcKWTzNkrcFi1Qw7ZVXf9XIBxXllBCxn3oxu8I3Tk3z0vUmH1GNy1qUW-khrsZLRjNMFHARjw-U2jqYBvVM9UqpskQKfvYQtxSZm2WwQJSMlAYkiAgHBVKHwEh2zUAv7H4zf-boI1Pe4iIG1MYyT_-GaPy2DUmmYGdwB_xpn0jYlIs5pqOZrCdzEKBx-HjvC_EzsriU4SiRIQ4a470HFIhJ9Mybq5i9cd4LmCPp7pM_-GIjtzat2VNMw.jpg |  34.111.35.152 | 200 OK | 38 kB |
URL GET cdn4.cdn-telegram.org/file/WF6Lc9h7pgHLtt5gBe5egvdfgLc1_fEotft3x5E4NKUEGn0GcLvYJnOKCrJ1EbPykbyTGHoCPBff-rrT-GFix5D_zX4LtKVcKWTzNkrcFi1Qw7ZVXf9XIBxXllBCxn3oxu8I3Tk3z0vUmH1GNy1qUW-khrsZLRjNMFHARjw-U2jqYBvVM9UqpskQKfvYQtxSZm2WwQJSMlAYkiAgHBVKHwEh2zUAv7H4zf-boI1Pe4iIG1MYyT_-GaPy2DUmmYGdwB_xpn0jYlIs5pqOZrCdzEKBx-HjvC_EzsriU4SiRIQ4a470HFIhJ9Mybq5i9cd4LmCPp7pM_-GIjtzat2VNMw.jpg IP34.111.35.152:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://t.me/DeepFansbot?start=1191863921 CertificateIssuerGoogle Trust Services Subjectcdn1.cdn-telegram.org Fingerprint71:B9:A6:59:57:FC:7C:53:2D:A2:10:F2:89:A4:83:AA:6B:93:1B:4E ValidityThu, 13 Feb 2025 05:40:23 GMT - Wed, 14 May 2025 06:34:57 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x320, components 3 Hash686b7dfcd7c630dee4329b7aa9c0a599 b831af9a946ea5159780f28d6cd1fadbc24c22ed 16841d30d8b0b091b097d6b834731f36cfe5c23b0f82c98bc76d5239d2bbc9e8
GET /file/WF6Lc9h7pgHLtt5gBe5egvdfgLc1_fEotft3x5E4NKUEGn0GcLvYJnOKCrJ1EbPykbyTGHoCPBff-rrT-GFix5D_zX4LtKVcKWTzNkrcFi1Qw7ZVXf9XIBxXllBCxn3oxu8I3Tk3z0vUmH1GNy1qUW-khrsZLRjNMFHARjw-U2jqYBvVM9UqpskQKfvYQtxSZm2WwQJSMlAYkiAgHBVKHwEh2zUAv7H4zf-boI1Pe4iIG1MYyT_-GaPy2DUmmYGdwB_xpn0jYlIs5pqOZrCdzEKBx-HjvC_EzsriU4SiRIQ4a470HFIhJ9Mybq5i9cd4LmCPp7pM_-GIjtzat2VNMw.jpg HTTP/1.1
Host: cdn4.cdn-telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
content-length: 38390
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
date: Sun, 06 Apr 2025 03:34:07 GMT
cache-control: public,max-age=7200
etag: "b0ecac45d648495680f211537dac69bd164c2f18"
content-type: image/jpeg
age: 4646
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 72gruq.kafa-climate-forest.de/s6npxq | 104.21.45.216 | 502 Bad Gateway | 166 B |
URL User Request GET 72gruq.kafa-climate-forest.de/s6npxq IP104.21.45.216:443
CertificateIssuerGoogle Trust Services Subjectkafa-climate-forest.de FingerprintBD:53:F5:C3:96:A8:3C:3E:77:68:27:E1:D1:F3:F1:1F:1E:E3:E8:98 ValidityFri, 14 Mar 2025 13:13:55 GMT - Thu, 12 Jun 2025 14:11:28 GMT
File typeHTML document, ASCII text, with no line terminators Hash5c5e0ef6e4141bd431c2a4af6e06ddb9 e3b171f8b4e374882ed87bb5944cfdf943ccff14 04f8ea7a4fb54d64be3b5f0abc3b9390ddae1910e5ad8322c2c895ff5df3291b
GET /s6npxq HTTP/1.1
Host: 72gruq.kafa-climate-forest.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 502 Bad Gateway
date: Sun, 06 Apr 2025 04:51:31 GMT
content-type: text/html
server: cloudflare
cf-cache-status: DYNAMIC
cf-ray: 92beaba89c7a56c6-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| telegram.org/css/font-roboto.css?1 | 149.154.167.99 | 200 OK | 6.2 kB |
URL GET telegram.org/css/font-roboto.css?1 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
Requested byhttps://t.me/DeepFansbot?start=1191863921 CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintC8:B7:84:85:FF:8F:0B:CA:9A:D6:E7:3E:81:F1:1E:94:39:D1:11:0A ValiditySat, 10 Aug 2024 13:33:14 GMT - Thu, 11 Sep 2025 13:33:14 GMT
File typeASCII text, with very long lines (6354), with no line terminators Hashc06318a1f377e388b69b104b4cefa1a6 151f067aae997487880e573876f96b8d598e64db 1a53363e667fffef8a82588191989d36e680b4d341c6b557e62bf207311a3d70
GET /css/font-roboto.css?1 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 06 Apr 2025 04:51:34 GMT
content-type: text/css
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: W/"63512b7d-1816"
expires: Thu, 10 Apr 2025 04:51:34 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| telegram.org/img/apple-touch-icon.png | 149.154.167.99 | 200 OK | 5.6 kB |
URL GET telegram.org/img/apple-touch-icon.png IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
Requested byhttps://t.me/DeepFansbot?start=1191863921 CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintC8:B7:84:85:FF:8F:0B:CA:9A:D6:E7:3E:81:F1:1E:94:39:D1:11:0A ValiditySat, 10 Aug 2024 13:33:14 GMT - Thu, 11 Sep 2025 13:33:14 GMT
File typePNG image data, 180 x 180, 8-bit/color RGB, non-interlaced Hash295ccdb03006b8dfef45090dafbd46ac 491ab660270e47cbac6a5731c51cca71c1c1b2b1 a51d667d4262047c23e3a2a8aac3b46dc8a58c686cc013f2354011c07bf22cf3
GET /img/apple-touch-icon.png HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://t.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Sun, 06 Apr 2025 04:51:35 GMT
content-type: image/png
content-length: 5644
last-modified: Thu, 21 Apr 2022 13:47:47 GMT
etag: "62616083-160c"
expires: Thu, 10 Apr 2025 04:51:35 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|