POC v4: open_tg_link host hijack (WebK API)
idle
🎣 OPEN evil.com via t.me userinfo confusion