https://t.me/penghasiluangtg_bot?start=r00275860986

Scan ID:: 03e828e5-3186-4aeb-a074-dc00bcbe6cb8Finished
Submitted URL:: https://t.co/ykE0tPDQcv
Report Finished:: Jan 15, 2025, 13:45:32

HTTP transactions · 11 detected

A list of all the HTTP requests and responses made by the resource during the current session


GETh2	200	ykE0tPDQcvDownloadhttps://t.co	Documenttext/html	308B814B	172.66.0.227AS13335 (US)
General Full URL https://t.co/ykE0tPDQcv Protocol h2 Security TLS 1.3, X25519, AES_128_GCM Server 172.66.0.227AS13335 (US) Server Software cloudflare tsa_o Resource Hash e4c0a7a3ad4ba8f2d027c15fd98eb952ac29767614c5de108d98367e3b51bbb9 Security Headers strict-transport-security max-age=0 x-xss-protection 0 Request Headers Upgrade-Insecure-Requests 1 User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" sec-ch-ua-platform Win32 :authority t.co :method GET :path /ykE0tPDQcv :scheme https accept text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 accept-encoding gzip, deflate, br accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 5288d527-da04-44b2-9ac8-93beb253cadc sec-fetch-dest document sec-fetch-mode navigate sec-fetch-site none sec-fetch-user ?1 upgrade-insecure-requests 1 user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers cache-control private,max-age=300 cf-cache-status DYNAMIC cf-ray 90264f2a6e9f3676-MAD content-encoding gzip content-type text/html; charset=utf-8 date Wed, 15 Jan 2025 13:45:58 GMT expires Wed, 15 Jan 2025 13:50:58 GMT perf 7402827104 server cloudflare tsa_o strict-transport-security max-age=0 vary Origin x-connection-hash 276ffd4c4f5f1ddf4f6e0b2b4d1dfc8b15cc97756c9231d370ae55ea77fb627f x-response-time 116 x-transaction-id c7a725eae207277d x-xss-protection 0
GET	Request Failed	resolvehttps://tg/	Documentx-unknown	0B-1B	—
General Full URL tg://resolve?domain=penghasiluangtg_bot&start=r00275860986 Requested by Type script Server ASundefined Request Headers Upgrade-Insecure-Requests 1 User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" sec-ch-ua-platform Win32
GETh2	200	Primary Requestpenghasiluangtg_botDownloadhttps://t.me	Documenttext/html	11.35kB4.52kB	149.154.167.99AS62041 (VG)
General Full URL https://t.me/penghasiluangtg_bot?start=r00275860986 Requested by URL https://t.co/ykE0tPDQcv Host t.co Type script Protocol h2 Security TLS 1.3, X25519, AES_256_GCM Server 149.154.167.99AS62041 (VG) Server Software nginx/1.18.0 Resource Hash f4bcbfd40f0e1568620d2282cef87959bd38c0a65370d68efa1905b1dc0327da Security Headers content-security-policy frame-ancestors https://web.telegram.org strict-transport-security max-age=35768000 x-frame-options ALLOW-FROM https://web.telegram.org Request Headers Referer https://t.co/ Upgrade-Insecure-Requests 1 User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" sec-ch-ua-platform Win32 :authority t.me :method GET :path /penghasiluangtg_bot?start=r00275860986 :scheme https accept text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 accept-encoding gzip, deflate, br accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 5288d527-da04-44b2-9ac8-93beb253cadc referer https://t.co/ sec-fetch-dest document sec-fetch-mode navigate sec-fetch-site cross-site upgrade-insecure-requests 1 user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers cache-control no-store content-encoding gzip content-length 4261 content-security-policy frame-ancestors https://web.telegram.org content-type text/html; charset=utf-8 date Wed, 15 Jan 2025 13:45:58 GMT pragma no-cache server nginx/1.18.0 strict-transport-security max-age=35768000 x-frame-options ALLOW-FROM https://web.telegram.org
GETh2	200	font-roboto.csshttps://telegram.org/css	StyleSheettext/css	6.02kB895B	149.154.167.99AS62041 (VG)
General Full URL https://telegram.org/css/font-roboto.css?1 Requested by URL https://t.me/penghasiluangtg_bot?start=r00275860986 Host t.me Type parser Protocol h2 Security TLS 1.3, X25519, AES_256_GCM Server 149.154.167.99AS62041 (VG) Server Software nginx/1.18.0 Resource Hash 84b97b3fa8847b64c6d3833561e4b3146530577171e85ad226578a087db70974 Security Headers strict-transport-security max-age=31536000; includeSubDomains; preload Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://t.me/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority telegram.org :method GET :path /css/font-roboto.css?1 :scheme https accept text/css,/;q=0.1 accept-encoding gzip, deflate, br accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 5288d527-da04-44b2-9ac8-93beb253cadc referer https://t.me/ sec-fetch-dest style sec-fetch-mode no-cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers date Wed, 15 Jan 2025 13:45:58 GMT strict-transport-security max-age=31536000; includeSubDomains; preload content-encoding gzip last-modified Thu, 20 Oct 2022 11:05:33 GMT server nginx/1.18.0 etag W/"63512b7d-1816" content-type text/css cache-control max-age=345600 expires Sun, 19 Jan 2025 13:45:58 GMT
GETh2	200	bootstrap.min.csshttps://telegram.org/css	StyleSheettext/css	41.53kB10.13kB	149.154.167.99AS62041 (VG)
General Full URL https://telegram.org/css/bootstrap.min.css?3 Requested by URL https://t.me/penghasiluangtg_bot?start=r00275860986 Host t.me Type parser Protocol h2 Security TLS 1.3, X25519, AES_256_GCM Server 149.154.167.99AS62041 (VG) Server Software nginx/1.18.0 Resource Hash f1d083ffaa644c708f11db29707aa57c19246e6d32643b03fee3f82c17b224b3 Security Headers strict-transport-security max-age=31536000; includeSubDomains; preload Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://t.me/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority telegram.org :method GET :path /css/bootstrap.min.css?3 :scheme https accept text/css,/;q=0.1 accept-encoding gzip, deflate, br accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 5288d527-da04-44b2-9ac8-93beb253cadc referer https://t.me/ sec-fetch-dest style sec-fetch-mode no-cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers date Wed, 15 Jan 2025 13:45:58 GMT strict-transport-security max-age=31536000; includeSubDomains; preload content-encoding gzip last-modified Fri, 10 Nov 2017 17:54:14 GMT server nginx/1.18.0 etag W/"5a05e7c6-a61b" content-type text/css cache-control max-age=345600 expires Sun, 19 Jan 2025 13:45:58 GMT
GETh2	200	telegram.csshttps://telegram.org/css	StyleSheettext/css	117.3kB29.83kB	149.154.167.99AS62041 (VG)
General Full URL https://telegram.org/css/telegram.css?243 Requested by URL https://t.me/penghasiluangtg_bot?start=r00275860986 Host t.me Type parser Protocol h2 Security TLS 1.3, X25519, AES_256_GCM Server 149.154.167.99AS62041 (VG) Server Software nginx/1.18.0 Resource Hash d2bcb4b97caf9ff71a555d59424c806fa55f33f86f2f1a762c5c661ab84eb843 Security Headers strict-transport-security max-age=31536000; includeSubDomains; preload Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://t.me/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority telegram.org :method GET :path /css/telegram.css?243 :scheme https accept text/css,/;q=0.1 accept-encoding gzip, deflate, br accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 5288d527-da04-44b2-9ac8-93beb253cadc referer https://t.me/ sec-fetch-dest style sec-fetch-mode no-cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers date Wed, 15 Jan 2025 13:45:58 GMT strict-transport-security max-age=31536000; includeSubDomains; preload content-encoding gzip last-modified Sat, 11 Jan 2025 16:02:27 GMT server nginx/1.18.0 etag W/"67829613-1d538" content-type text/css cache-control max-age=345600 expires Sun, 19 Jan 2025 13:45:58 GMT
GETh2	200	blmcI0A94AvnO5-iUux_pwW8MWeYLwnkwLyGXQgDSSgmlqouVJMcnZ_26dMUNw9rGfxK0wwIOgVLrkphO7J6vzwD0wPHe-j2a02KjFta7RqsCVVMkx7yO27DMXzNZ4OrhxYYL6I6chbAA3NlKDTXRYB_h1eqUbZBz5jXeMESTP0t3Zgvzb3rc39PEutw12L3MAWuo7-poJ4FUQlGGWvSxvD8j31KyxN6Gt9NH8OWLNd_cDZ1Iu19if-bMb3cisycAy60VlK4EfyztRFC5wF59BxC3bhiPUnu9nzBak2H2l8RbiFdLHfogZJ8ZUyQJMkGBlg2QOd7ErYtZ_vIn4tXTQ.jpgDownloadhttps://cdn5.cdn-telegram.org/file	Imageimage/jpeg	13.8kB14.18kB	34.111.108.175AS396982 (US)
General Full URL https://cdn5.cdn-telegram.org/file/blmcI0A94AvnO5-iUux_pwW8MWeYLwnkwLyGXQgDSSgmlqouVJMcnZ_26dMUNw9rGfxK0wwIOgVLrkphO7J6vzwD0wPHe-j2a02KjFta7RqsCVVMkx7yO27DMXzNZ4OrhxYYL6I6chbAA3NlKDTXRYB_h1eqUbZBz5jXeMESTP0t3Zgvzb3rc39PEutw12L3MAWuo7-poJ4FUQlGGWvSxvD8j31KyxN6Gt9NH8OWLNd_cDZ1Iu19if-bMb3cisycAy60VlK4EfyztRFC5wF59BxC3bhiPUnu9nzBak2H2l8RbiFdLHfogZJ8ZUyQJMkGBlg2QOd7ErYtZ_vIn4tXTQ.jpg Requested by URL https://t.me/penghasiluangtg_bot?start=r00275860986 Host t.me Type parser Protocol h2 Security TLS 1.3, X25519, AES_128_GCM Server 34.111.108.175AS396982 (US) Server Software nginx/1.18.0 Resource Hash 0ae6a34b3509538ed0583d537643c5b45de8c711a5858dec6f8dfb612ce3174b Security Headers content-security-policy default-src 'none'; sandbox x-content-type-options nosniff strict-transport-security max-age=31536000; includeSubDomains; preload x-xss-protection 1; mode=block x-frame-options DENY Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://t.me/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority cdn5.cdn-telegram.org :method GET :path /file/blmcI0A94AvnO5-iUux_pwW8MWeYLwnkwLyGXQgDSSgmlqouVJMcnZ_26dMUNw9rGfxK0wwIOgVLrkphO7J6vzwD0wPHe-j2a02KjFta7RqsCVVMkx7yO27DMXzNZ4OrhxYYL6I6chbAA3NlKDTXRYB_h1eqUbZBz5jXeMESTP0t3Zgvzb3rc39PEutw12L3MAWuo7-poJ4FUQlGGWvSxvD8j31KyxN6Gt9NH8OWLNd_cDZ1Iu19if-bMb3cisycAy60VlK4EfyztRFC5wF59BxC3bhiPUnu9nzBak2H2l8RbiFdLHfogZJ8ZUyQJMkGBlg2QOd7ErYtZ_vIn4tXTQ.jpg :scheme https accept image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 accept-encoding gzip, deflate, br accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 5288d527-da04-44b2-9ac8-93beb253cadc referer https://t.me/ sec-fetch-dest image sec-fetch-mode no-cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers date Wed, 15 Jan 2025 13:45:58 GMT content-security-policy default-src 'none'; sandbox x-content-type-options nosniff strict-transport-security max-age=31536000; includeSubDomains; preload via 1.1 google alt-svc h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 content-length 14136 x-xss-protection 1; mode=block server nginx/1.18.0 etag "c004d596848260cef6600c0d2e11d6be180fac3f" x-frame-options DENY content-type image/jpeg access-control-allow-origin access-control-expose-headers Accept-Ranges, Content-Range, Content-Length cache-control max-age=3600,public accept-ranges bytes, bytes
GETh2	200	tgwallpaper.min.jshttps://telegram.org/js	Scriptapplication/javascript	2.91kB1.72kB	149.154.167.99AS62041 (VG)
General Full URL https://telegram.org/js/tgwallpaper.min.js?3 Requested by URL https://t.me/penghasiluangtg_bot?start=r00275860986 Host t.me Type parser Protocol h2 Security TLS 1.3, X25519, AES_256_GCM Server 149.154.167.99AS62041 (VG) Server Software nginx/1.18.0 Resource Hash 2031e418ee10af8110729b3f327b968462fc0a9d8d1da095387bb472ccd0dee6 Security Headers strict-transport-security max-age=31536000; includeSubDomains; preload Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://t.me/ User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority telegram.org :method GET :path /js/tgwallpaper.min.js?3 :scheme https accept / accept-encoding gzip, deflate, br accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 5288d527-da04-44b2-9ac8-93beb253cadc referer https://t.me/ sec-fetch-dest script sec-fetch-mode no-cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers date Wed, 15 Jan 2025 13:45:58 GMT strict-transport-security max-age=31536000; includeSubDomains; preload content-encoding gzip last-modified Thu, 03 Mar 2022 19:57:25 GMT server nginx/1.18.0 etag W/"62211da5-ba3" content-type application/javascript cache-control max-age=345600 expires Sun, 19 Jan 2025 13:45:58 GMT
GETh2	200	pattern.svgDownloadhttps://telegram.org/img/tgme	Imageimage/svg+xml	226.28kB80.68kB	149.154.167.99AS62041 (VG)
General Full URL https://telegram.org/img/tgme/pattern.svg?1 Requested by URL https://telegram.org/css/telegram.css?243 Host telegram.org Type parser Protocol h2 Security TLS 1.3, X25519, AES_256_GCM Server 149.154.167.99AS62041 (VG) Server Software nginx/1.18.0 Resource Hash 118add53487c02aaf5b5ab9f69380fa06717deb10492e14aaa487e3c62806ad4 Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://telegram.org/css/telegram.css?243 User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 Response Headers date Wed, 15 Jan 2025 13:45:58 GMT content-encoding gzip last-modified Thu, 05 Jan 2023 17:52:04 GMT server nginx/1.18.0 etag W/"63b70e44-3891a" content-type image/svg+xml access-control-allow-origin * cache-control max-age=345600 expires Sun, 19 Jan 2025 13:45:58 GMT
GETh2	200	KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2https://telegram.org/fonts/Roboto	Fontapplication/octet-stream	10.78kB11kB	149.154.167.99AS62041 (VG)
General Full URL https://telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 Requested by URL https://telegram.org/css/font-roboto.css?1 Host telegram.org Type parser Protocol h2 Security TLS 1.3, X25519, AES_256_GCM Server 149.154.167.99AS62041 (VG) Server Software nginx/1.18.0 Request Headers sec-ch-ua "Google Chrome";v="126", "Not:A-Brand";v="8", "Chromium";v="119" Referer https://telegram.org/css/font-roboto.css?1 Origin https://t.me User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 sec-ch-ua-platform Win32 :authority telegram.org :method GET :path /fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 :scheme https accept / accept-encoding gzip, deflate, br accept-language en-US,en;q=0.9 cf-biso-devtools 1 cf-biso-request-id 5288d527-da04-44b2-9ac8-93beb253cadc origin https://t.me referer https://telegram.org/css/font-roboto.css?1 sec-fetch-dest font sec-fetch-mode cors sec-fetch-site cross-site user-agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Response Headers date Wed, 15 Jan 2025 13:45:59 GMT last-modified Thu, 20 Oct 2022 11:05:33 GMT server nginx/1.18.0 etag "63512b7d-2b20" content-type application/octet-stream access-control-allow-origin * cache-control max-age=345600 accept-ranges bytes content-length 11040 expires Sun, 19 Jan 2025 13:45:59 GMT

Page history · 3 entries found

HTTP, JavaScript or Meta tag redirects

https://t.co/ykE0tPDQcv200
tg://resolve?domain=penghasiluangtg_bot&start=r002758609860
https://t.me/penghasiluangtg_bot?start=r00275860986200

Redirect chains · 0 found

Redirects that were detected on the HTTP transactions

DNS records · 2 found

DNS records provide information about a domain including what IP address it's associated with

Type	Name	Content	DNSSEC
A	t.me	149.154.167.99	Disabled
AAAA	t.me	2001:67c:4e8:f004::9	Disabled