Windows Analysis Report
http://teleqvom.cn/

{
    "typosquatting": false,
    "unusual_query_string": false,
    "suspicious_tld": true,
    "ip_in_url": false,
    "long_subdomain": false,
    "malicious_keywords": false,
    "encoded_characters": false,
    "redirection": false,
    "contains_email_address": false,
    "known_domain": false,
    "brand_spoofing_attempt": false,
    "third_party_hosting": false
}

URL: http://teleqvom.cn

{
    "risk_score": 1,
    "reasoning": "The provided JavaScript snippet appears to be a library for generating QR codes, which is a common and legitimate functionality. The code does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to suspicious domains. The library uses standard QR code generation techniques and does not exhibit any suspicious behavior. Overall, this script is likely benign and poses a low risk."
}

/*! kjua v0.9.0 - https://larsjung.de/kjua/ */
!(function (t, r) {
  'object' == typeof exports && 'object' == typeof module
    ? (module.exports = r())
    : 'function' == typeof define && define.amd
    ? define('kjua', [], r)
    : 'object' == typeof exports
    ? (exports.kjua = r())
    : (t.kjua = r());
})('undefined' != typeof self ? self : this, function () {
  return (
    (n = {}),
    (o.m = e =
      [
        function (t, r, e) {
          function n(t) {
            var r = Object.assign({}, o, t),
              e = i(r.text, r.ecLevel, r.minVersion, r.quiet);
            return 'svg' === r.render ? u(e, r) : a(e, r, 'image' === r.render);
          }
          var o = e(1),
            i = e(2),
            a = e(4),
            u = e(8);
          t.exports = n;
          try {
            jQuery.fn.kjua = function (e) {
              return this.each(function (t, r) {
                return r.appendChild(n(e));
              });
            };
          } catch (t) {}
        },
        function (t, r) {
          t.exports = {
            render: 'image',
            crisp: !0,
            minVersion: 1,
            ecLevel: 'L',
            size: 200,
            ratio: null,
            fill: '#333',
            back: '#fff',
            text: 'no text',
            rounded: 0,
            quiet: 0,
            mode: 'plain',
            mSize: 30,
            mPosX: 50,
            mPosY: 50,
            label: 'no label',
            fontname: 'sans',
            fontcolor: '#333',
            image: null
          };
        },
        function (t, r, e) {
          function u(t) {
            return (u =
              'function' == typeof Symbol && 'symbol' == typeof Symbol.iterator
                ? function (t) {
                    return typeof t;
                  }
                : function (t) {
                    return t &&
                      'function' == typeof Symbol &&
                      t.constructor === Symbol &&
                      t !== Symbol.prototype
                      ? 'symbol'
                      : typeof t;
                  })(t);
          }
          var f = /code length overflow/i,
            c = e(3);
          c.stringToBytes = c.stringToBytesFuncs['UTF-8'];
          t.exports = function (t, r, e, n) {
            var o,
              i = 3 < arguments.length && void 0 !== n ? n : 0,
              a = (function (t, r, e) {
                for (
                  var n = 2 < arguments.length && void 0 !== e ? e : 1,
                    o = (n = Math.max(1, n));
                  o <= 40;
                  o += 1
                )
                  try {
                    var i = (function () {
                      var e = c(o, r);
                      e.addData(t), e.make();
                      var n = e.getModuleCount();
                      return {
                        v: {
                          text: t,
                          level: r,
                          version: o,
                          module_count: n,
                          is_dark: function (t, r) {
                            return (
                              0 <= t &&
                              t < n &&
                              0 <= r &&
                              r < n &&
                              e.isDark(t, r)
                            );
                          }
                        }
                      };
                    })();
                    if ('object' === u(i)) return i.v;
                  } catch (t) {
                    if (!(o < 40 && f.test(t))) throw new Error(t);
                  }
                return null;
              })(
                0 < arguments.length && void 0 !== t ? t : '',
                1 < arguments.length && void 0 !== r ? r : 'L',
                2 < arguments.length && void 0 !== e ? e : 1
              );
            return (
              a &&
                ((o = a.is_dark),
             

{
    "risk_score": 1,
    "reasoning": "The provided JavaScript snippet appears to be the jQuery library, which is a widely used and trusted JavaScript library. It does not contain any high-risk indicators, such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code is well-structured and follows common patterns for a library of this nature. Overall, this script poses a low risk and is likely a legitimate and benign part of a web application."
}

/*!
 * jQuery JavaScript Library v3.7.1
 * https://jquery.com/
 *
 * Copyright OpenJS Foundation and other contributors
 * Released under the MIT license
 * https://jquery.org/license
 *
 * Date: 2023-08-28T13:37Z
 */
(function (global, factory) {
  'use strict';

  if (typeof module === 'object' && typeof module.exports === 'object') {
    // For CommonJS and CommonJS-like environments where a proper `window`
    // is present, execute the factory and get jQuery.
    // For environments that do not have a `window` with a `document`
    // (such as Node.js), expose a factory as module.exports.
    // This accentuates the need for the creation of a real `window`.
    // e.g. var jQuery = require("jquery")(window);
    // See ticket trac-14549 for more info.
    module.exports = global.document
      ? factory(global, true)
      : function (w) {
          if (!w.document) {
            throw new Error('jQuery requires a window with a document');
          }
          return factory(w);
        };
  } else {
    factory(global);
  }

  // Pass this if window is not defined yet
})(typeof window !== 'undefined' ? window : this, function (window, noGlobal) {
  // Edge <= 12 - 13+, Firefox <=18 - 45+, IE 10 - 11, Safari 5.1 - 9+, iOS 6 - 9.1
  // throw exceptions when non-strict code (e.g., ASP.NET 4.5) accesses strict mode
  // arguments.callee.caller (trac-13335). But as of jQuery 3.0 (2016), strict mode should be common
  // enough that all such attempts are guarded in a try block.
  'use strict';

  var arr = [];

  var getProto = Object.getPrototypeOf;

  var slice = arr.slice;

  var flat = arr.flat
    ? function (array) {
        return arr.flat.call(array);
      }
    : function (array) {
        return arr.concat.apply([], array);
      };

  var push = arr.push;

  var indexOf = arr.indexOf;

  var class2type = {};

  var toString = class2type.toString;

  var hasOwn = class2type.hasOwnProperty;

  var fnToString = hasOwn.toString;

  var ObjectFunctionString = fnToString.call(Object);

  var support = {};

  var isFunction = function isFunction(obj) {
    // Support: Chrome <=57, Firefox <=52
    // In some browsers, typeof returns "function" for HTML <object> elements
    // (i.e., `typeof document.createElement( "object" ) === "function"`).
    // We don't want to classify *any* DOM node as a function.
    // Support: QtWeb <=3.8.5, WebKit <=534.34, wkhtmltopdf tool <=0.12.5
    // Plus for old WebKit, typeof returns "function" for HTML collections
    // (e.g., `typeof document.getElementsByTagName("div") === "function"`). (gh-4756)
    return (
      typeof obj === 'function' &&
      typeof obj.nodeType !== 'number' &&
      typeof obj.item !== 'function'
    );
  };

  var isWindow = function isWindow(obj) {
    return obj != null && obj === obj.window;
  };

  var document = window.document;

  var preservedScriptAttributes = {
    type: true,
    src: true,
    nonce: true,
    noModule: true
  };

  function DOMEval(code, node, doc) {
    doc = doc || document;

    var i,
      val,
      script = doc.createElement('script');

    script.text = code;
    if (node) {
      for (i in preservedScriptAttributes) {
        // Support: Firefox 64+, Edge 18+
        // Some browsers don't support the "nonce" property on scripts.
        // On the other hand, just using `getAttribute` is not enough as
        // the `nonce` attribute is reset to an empty string whenever it
        // becomes browsing-context connected.
        // See https://github.com/whatwg/html/issues/2369
        // See https://html.spec.whatwg.org/#nonce-attributes
        // The `node.getAttribute` check was added for the sake of
        // `jQuery.globalEval` so that it can fake a nonce-containing node
        // via an object.
        val = node[i] || (node.getAttribute && node.getAttribute(i));
        if (val) {
          script.setAttribute(i, val);
        }
      }
    }
    doc.head.appendChild(script).parentNode.removeChild(script);
  }

  

{
    "risk_score": 1,
    "reasoning": "The provided code snippet appears to be the Bootstrap JavaScript library, which is a widely used and trusted open-source front-end framework. The code does not contain any high-risk indicators, such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code is primarily focused on managing the lifecycle and state of Bootstrap components, which is a legitimate and expected behavior for a UI framework. There are no signs of obfuscation or suspicious activities, and the code is well-structured and documented. Overall, this code snippet poses a low risk and is likely part of a legitimate web application."
}

/*!
 * Bootstrap v5.3.2 (https://getbootstrap.com/)
 * Copyright 2011-2023 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors)
 * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE)
 */
!(function (t, e) {
  'object' == typeof exports && 'undefined' != typeof module
    ? (module.exports = e())
    : 'function' == typeof define && define.amd
    ? define(e)
    : ((t =
        'undefined' != typeof globalThis ? globalThis : t || self).bootstrap =
        e());
})(this, function () {
  'use strict';
  const t = new Map(),
    e = {
      set(e, i, n) {
        t.has(e) || t.set(e, new Map());
        const s = t.get(e);
        s.has(i) || 0 === s.size
          ? s.set(i, n)
          : console.error(
              `Bootstrap doesn't allow more than one instance per element. Bound instance: ${
                Array.from(s.keys())[0]
              }.`
            );
      },
      get: (e, i) => (t.has(e) && t.get(e).get(i)) || null,
      remove(e, i) {
        if (!t.has(e)) return;
        const n = t.get(e);
        n.delete(i), 0 === n.size && t.delete(e);
      }
    },
    i = 'transitionend',
    n = t => (
      t &&
        window.CSS &&
        window.CSS.escape &&
        (t = t.replace(/#([^\s"#']+)/g, (t, e) => `#${CSS.escape(e)}`)),
      t
    ),
    s = t => {
      t.dispatchEvent(new Event(i));
    },
    o = t =>
      !(!t || 'object' != typeof t) &&
      (void 0 !== t.jquery && (t = t[0]), void 0 !== t.nodeType),
    r = t =>
      o(t)
        ? t.jquery
          ? t[0]
          : t
        : 'string' == typeof t && t.length > 0
        ? document.querySelector(n(t))
        : null,
    a = t => {
      if (!o(t) || 0 === t.getClientRects().length) return !1;
      const e =
          'visible' === getComputedStyle(t).getPropertyValue('visibility'),
        i = t.closest('details:not([open])');
      if (!i) return e;
      if (i !== t) {
        const e = t.closest('summary');
        if (e && e.parentNode !== i) return !1;
        if (null === e) return !1;
      }
      return e;
    },
    l = t =>
      !t ||
      t.nodeType !== Node.ELEMENT_NODE ||
      !!t.classList.contains('disabled') ||
      (void 0 !== t.disabled
        ? t.disabled
        : t.hasAttribute('disabled') && 'false' !== t.getAttribute('disabled')),
    c = t => {
      if (!document.documentElement.attachShadow) return null;
      if ('function' == typeof t.getRootNode) {
        const e = t.getRootNode();
        return e instanceof ShadowRoot ? e : null;
      }
      return t instanceof ShadowRoot
        ? t
        : t.parentNode
        ? c(t.parentNode)
        : null;
    },
    h = () => {},
    d = t => {
      t.offsetHeight;
    },
    u = () =>
      window.jQuery && !document.body.hasAttribute('data-bs-no-jquery')
        ? window.jQuery
        : null,
    f = [],
    p = () => 'rtl' === document.documentElement.dir,
    m = t => {
      var e;
      (e = () => {
        const e = u();
        if (e) {
          const i = t.NAME,
            n = e.fn[i];
          (e.fn[i] = t.jQueryInterface),
            (e.fn[i].Constructor = t),
            (e.fn[i].noConflict = () => ((e.fn[i] = n), t.jQueryInterface));
        }
      }),
        'loading' === document.readyState
          ? (f.length ||
              document.addEventListener('DOMContentLoaded', () => {
                for (const t of f) t();
              }),
            f.push(e))
          : e();
    },
    g = (t, e = [], i = t) => ('function' == typeof t ? t(...e) : i),
    _ = (t, e, n = !0) => {
      if (!n) return void g(t);
      const o =
        (t => {
          if (!t) return 0;
          let { transitionDuration: e, transitionDelay: i } =
            window.getComputedStyle(t);
          const n = Number.parseFloat(e),
            s = Number.parseFloat(i);
          return n || s
            ? ((e = e.split(',')[0]),
              (i = i.split(',')[0]),
              1e3 * (Number.parseFloat(e) 

{
    "risk_score": 6,
    "reasoning": "The provided JavaScript snippet appears to be a part of the Telegram app, which is a legitimate application. However, the code contains some behaviors that raise moderate security concerns:

1. External Data Transmission (+2 points): The code sends user data to external domains via XHR or fetch requests, which could potentially lead to data exfiltration if not properly handled.
2. Fallback Domains (+2 points): The code uses multiple fallback domains, some of which may be of unknown or suspicious reputation.
3. Aggressive DOM Manipulation (+2 points): The code repeatedly alters or clears the DOM, which could indicate potential malicious activity or performance issues.

While the overall intent of the code seems to be related to the Telegram app, the presence of these moderate-risk indicators warrants further review to ensure that the data transmission and domain interactions are legitimate and secure. A final risk score of 6 is assigned, placing this script in the 'Medium Risk' category."
}

(self.webpackChunktelegram_app=self.webpackChunktelegram_app||[]).push([[792],{355:(Zi,Xi,Sn)=>{"use strict";var er={};function q(e){return"function"==typeof e}function Je(e){const n=e(r=>{Error.call(r),r.stack=(new Error).stack});return n.prototype=Object.create(Error.prototype),n.prototype.constructor=n,n}Sn.r(er),Sn.d(er,{Decoder:()=>jm,Encoder:()=>c6,PacketType:()=>we,protocol:()=>a6});const lt=Je(e=>function(n){e(this),this.message=n?`${n.length} errors occurred during unsubscription:\n${n.map((r,i)=>`${i+1}) ${r.toString()}`).join("\n  ")}`:"",this.name="UnsubscriptionError",this.errors=n});function ze(e,t){if(e){const n=e.indexOf(t);0<=n&&e.splice(n,1)}}class Ke{constructor(t){this.initialTeardown=t,this.closed=!1,this._parentage=null,this._finalizers=null}unsubscribe(){let t;if(!this.closed){this.closed=!0;const{_parentage:n}=this;if(n)if(this._parentage=null,Array.isArray(n))for(const o of n)o.remove(this);else n.remove(this);const{initialTeardown:r}=this;if(q(r))try{r()}catch(o){t=o instanceof lt?o.errors:[o]}const{_finalizers:i}=this;if(i){this._finalizers=null;for(const o of i)try{Oe(o)}catch(s){t=t??[],s instanceof lt?t=[...t,...s.errors]:t.push(s)}}if(t)throw new lt(t)}}add(t){var n;if(t&&t!==this)if(this.closed)Oe(t);else{if(t instanceof Ke){if(t.closed||t._hasParent(this))return;t._addParent(this)}(this._finalizers=null!==(n=this._finalizers)&&void 0!==n?n:[]).push(t)}}_hasParent(t){const{_parentage:n}=this;return n===t||Array.isArray(n)&&n.includes(t)}_addParent(t){const{_parentage:n}=this;this._parentage=Array.isArray(n)?(n.push(t),n):n?[n,t]:t}_removeParent(t){const{_parentage:n}=this;n===t?this._parentage=null:Array.isArray(n)&&ze(n,t)}remove(t){const{_finalizers:n}=this;n&&ze(n,t),t instanceof Ke&&t._removeParent(this)}}Ke.EMPTY=(()=>{const e=new Ke;return e.closed=!0,e})();const Ct=Ke.EMPTY;function Et(e){return e instanceof Ke||e&&"closed"in e&&q(e.remove)&&q(e.add)&&q(e.unsubscribe)}function Oe(e){q(e)?e():e.unsubscribe()}const cn={onUnhandledError:null,onStoppedNotification:null,Promise:void 0,useDeprecatedSynchronousErrorHandling:!1,useDeprecatedNextContext:!1},vi={setTimeout(e,t,...n){const{delegate:r}=vi;return r?.setTimeout?r.setTimeout(e,t,...n):setTimeout(e,t,...n)},clearTimeout(e){const{delegate:t}=vi;return(t?.clearTimeout||clearTimeout)(e)},delegate:void 0};function bs(e){vi.setTimeout(()=>{const{onUnhandledError:t}=cn;if(!t)throw e;t(e)})}function Ss(){}const Cd=Ji("C",void 0,void 0);function Ji(e,t,n){return{kind:e,value:t,error:n}}let Er=null;function eo(e){if(cn.useDeprecatedSynchronousErrorHandling){const t=!Er;if(t&&(Er={errorThrown:!1,error:null}),e(),t){const{errorThrown:n,error:r}=Er;if(Er=null,n)throw r}}else e()}class Ms extends Ke{constructor(t){super(),this.isStopped=!1,t?(this.destination=t,Et(t)&&t.add(this)):this.destination=m}static create(t,n,r){return new P(t,n,r)}next(t){this.isStopped?w(function Dd(e){return Ji("N",e,void 0)}(t),this):this._next(t)}error(t){this.isStopped?w(function Ed(e){return Ji("E",void 0,e)}(t),this):(this.isStopped=!0,this._error(t))}complete(){this.isStopped?w(Cd,this):(this.isStopped=!0,this._complete())}unsubscribe(){this.closed||(this.isStopped=!0,super.unsubscribe(),this.destination=null)}_next(t){this.destination.next(t)}_error(t){try{this.destination.error(t)}finally{this.unsubscribe()}}_complete(){try{this.destination.complete()}finally{this.unsubscribe()}}}const H=Function.prototype.bind;function z(e,t){return H.call(e,t)}class k{constructor(t){this.partialObserver=t}next(t){const{partialObserver:n}=this;if(n.next)try{n.next(t)}catch(r){b(r)}}error(t){const{partialObserver:n}=this;if(n.error)try{n.error(t)}catch(r){b(r)}else b(t)}complete(){const{partialObserver:t}=this;if(t.complete)try{t.complete()}catch(n){b(n)}}}class P extends Ms{constructor(t,n,r){let i;if(super(),q(t)||!t)i={next:t??void 0,error:n??void 0,complete:r??void 0};else{let o;this&&cn.useDeprecatedNextContext?(o=Object.create(t),o.unsubscribe=()=>this.unsubscribe(),i={next:t.nex

{
"contains_trigger_text": true,
"trigger_text": " Telegram",
"prominent_button_name": "unknown",
"text_input_field_labels": "unknown",
"pdf_icon_visible": false,
"has_visible_captcha": false,
"has_urgent_text": false,
"has_visible_qrcode": true,
"contains_chinese_text": true,
"contains_fake_security_alerts": false
}

{
  "brands": "unknown"
}