Gonna record the video about it, and ask you a question meanwhile. I didnt get how they transfer my phone number over the network:
In devtools when I pressed “send” (ofc I was testing them out of curiousity), I have seen just GET requests for some .js and .json files, with hashed/encrypted nonsense in path, along with obfuscated js, which seems to becode that calls telgram api, but this call never happens in network tab. Also when load the page they load bunch of .wasm.
Anyone seen this?
In devtools when I pressed “send” (ofc I was testing them out of curiousity), I have seen just GET requests for some .js and .json files, with hashed/encrypted nonsense in path, along with obfuscated js, which seems to becode that calls telgram api, but this call never happens in network tab. Also when load the page they load bunch of .wasm.
Anyone seen this?
andreyka26_se
Like this: https://domain.com/56a7cd874776e3e37b022c8dded57bddac01031404615b103e8a9ef38ccaca30/Ea7c35J/qy49gkdrl14o.js
Is this some sort of dynamic encryption that is going on underneath, or is it something related to how telegram client works? As I didnt see entered phone number anywhere. Webrtc is not established, sockets are not as well, in network only these .js requests, and the code is in my telegram, so it is working. Maybe they compiled and patched TDlib or whatever this open source telegram thing called?
DONT ENTER UOUR INFORMATION HERE, FOLLOW THIS LINK ONLY FOR PURPOSE TO LEARN HOW PHISHING WORKS.
MAKE SURE YOU HAVE 2 factor auth on telegram and follow link in incognito mode only
https://population.anyiloy.top/X
MAKE SURE YOU HAVE 2 factor auth on telegram and follow link in incognito mode only
https://population.anyiloy.top/X
population.anyiloy.top
Благодійний конкурс дитячого малюнка Кольори допомоги 1/4 фіналу.
andreyka26_se
DONT ENTER UOUR INFORMATION HERE, FOLLOW THIS LINK ONLY FOR PURPOSE TO LEARN HOW PHISHING WORKS. MAKE SURE YOU HAVE 2 factor auth on telegram and follow link in incognito mode only https://population.anyiloy.top/X
If you tell me how it transfers the phone number and provide me with simple code that emulates the same communication - I will pay you 5 eur 😁😁
😁4
Daily (109 day streak)
If you solved one of previous dailies, it should be Medium, so I would not say it is that hard, the idea is the same.
https://leetcode.com/problems/paths-in-matrix-whose-sum-is-divisible-by-k/description/?envType=daily-question&envId=2025-11-26
#daily #hard
If you solved one of previous dailies, it should be Medium, so I would not say it is that hard, the idea is the same.
https://leetcode.com/problems/paths-in-matrix-whose-sum-is-divisible-by-k/description/?envType=daily-question&envId=2025-11-26
#daily #hard
🔥3
Daily (110 day streak)
I would not say that intuition is that easy to build, but once you've done it - it is fairly easy. For that you would need to know Kadane's algo, which is a good problem to remind about it
https://leetcode.com/problems/maximum-subarray-sum-with-length-divisible-by-k/description/?envType=daily-question&envId=2025-11-27
#daily #medium
I would not say that intuition is that easy to build, but once you've done it - it is fairly easy. For that you would need to know Kadane's algo, which is a good problem to remind about it
https://leetcode.com/problems/maximum-subarray-sum-with-length-divisible-by-k/description/?envType=daily-question&envId=2025-11-27
#daily #medium
🔥2
CAN YOU FUCKING IMAGINE, chrome does not show "preview" or "content" of the page that was before redirection, but Edge does show it?
(yes, still trying to understand this phishing site)
https://superuser.com/questions/1788537/why-do-chromes-developer-tools-fail-to-always-collect-response-data
(yes, still trying to understand this phishing site)
https://superuser.com/questions/1788537/why-do-chromes-developer-tools-fail-to-always-collect-response-data
🤔1
Let me start.
Whenever you click on the "vote", the telegram page loads.
STEP 1. telegram-page.html (naming for simplicity, actually named "/pnbZeA4")
This telegram page is regular "document" request that loads bunch of js files:
- 4vt095smidla.js.
See screen 1.
STEP 2. telegram-client-preloader.js (actually named "/4vt095smidla.js")
This preloader loads telegram client loader and bunch of other .js files
See screen 2.
STEP 3. telegram-webworker-loader.js (actually named "/9nnoq789wklc.js").
This loader registers WebWorker that runs telegram client js. This webworker runs in separate thread so we actually don't see opened sockets to Telegram.
See screen 3
STEP 4 telegram-client-webworker.js (actually named "/vmu7hv3hxb8g.js") starts communication with telegram using websockets.
To see it in webtools, go to edge://inspect/#workers, and click "inspect" on all workers you will see
See screen 4, 5, 6
Attaching deobfuscated files (some of them are so large that I need to do it locally)
Whenever you click on the "vote", the telegram page loads.
STEP 1. telegram-page.html (naming for simplicity, actually named "/pnbZeA4")
This telegram page is regular "document" request that loads bunch of js files:
- 4vt095smidla.js.
See screen 1.
STEP 2. telegram-client-preloader.js (actually named "/4vt095smidla.js")
This preloader loads telegram client loader and bunch of other .js files
See screen 2.
STEP 3. telegram-webworker-loader.js (actually named "/9nnoq789wklc.js").
This loader registers WebWorker that runs telegram client js. This webworker runs in separate thread so we actually don't see opened sockets to Telegram.
See screen 3
STEP 4 telegram-client-webworker.js (actually named "/vmu7hv3hxb8g.js") starts communication with telegram using websockets.
To see it in webtools, go to edge://inspect/#workers, and click "inspect" on all workers you will see
See screen 4, 5, 6
Attaching deobfuscated files (some of them are so large that I need to do it locally)
🤯4
From now on, as they are changing domains the next day after my report - I will be posting domains to report here, so please join me, and let's ban motherfuckers, or at least make them pay for domains. For you it will be few clicks I will leave report content and links
👍2
Daily (111 day streak)
Everyone in discussion is keep saying it is hard, but I got stuck in understanding how to understand the node is leaf, or node is root, or node in the middle.
I will give you hint: the node is leaf in graph only in case it has single connection and this connection is parent. Otherwise problem is not that hard (check hints in leetcode)
https://leetcode.com/problems/maximum-number-of-k-divisible-components/description/?envType=daily-question&envId=2025-11-28
#daily #hard
Everyone in discussion is keep saying it is hard, but I got stuck in understanding how to understand the node is leaf, or node is root, or node in the middle.
I will give you hint: the node is leaf in graph only in case it has single connection and this connection is parent. Otherwise problem is not that hard (check hints in leetcode)
https://leetcode.com/problems/maximum-number-of-k-divisible-components/description/?envType=daily-question&envId=2025-11-28
#daily #hard
LeetCode
Maximum Number of K-Divisible Components - LeetCode
Can you solve this real interview question? Maximum Number of K-Divisible Components - There is an undirected tree with n nodes labeled from 0 to n - 1. You are given the integer n and a 2D integer array edges of length n - 1, where edges[i] = [ai, bi] indicates…
🔥1