| code.jquery.com/jquery-3.4.1.slim.min.js |  151.101.66.137 | 200 OK | 24 kB |
URL GET HTTP/2code.jquery.com/jquery-3.4.1.slim.min.js IP151.101.66.137:443
CertificateIssuerSectigo Limited Subject*.jquery.com FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65247) Hashd9b11ca4d877c327889805b73bb79edd dd15958a3f0f1f3601461f927c4703a56ed59011 a5ab2a00a0439854f8787a0dda775dea5377ef4905886505c938941d6854ee4f
GET /jquery-3.4.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nakonways.kz
DNT: 1
Connection: keep-alive
Referer: https://nakonways.kz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-1157d"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 18 Apr 2024 06:24:06 GMT
age: 18517645
x-served-by: cache-lga13626-LGA, cache-hel1410027-HEL
x-cache: HIT, HIT
x-cache-hits: 15, 35173
x-timer: S1713421447.637913,VS0,VE0
vary: Accept-Encoding
content-length: 24328
X-Firefox-Spdy: h2
|
|
| nakonways.kz/file/img1.jpg |  185.98.5.104 | 200 OK | 33 kB |
URL GET HTTP/2nakonways.kz/file/img1.jpg IP185.98.5.104:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnakonways.kz Fingerprint61:82:A4:E1:C3:BD:ED:9F:55:57:92:38:FC:57:A7:E7:B6:9D:A1:D0 ValiditySat, 06 Apr 2024 08:20:49 GMT - Fri, 05 Jul 2024 08:20:48 GMT
File typegzip compressed data, max compression, from Unix Hashdf9455550243a54739c0413c1baa76b1 dad3ae586fbcdfa01bec284e95a9c46a79989a3e b6697dfa5168b54725d553b177a579e0b2c9d1efe3218d3c554d368ecd4db7e4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /file/img1.jpg HTTP/1.1
Host: nakonways.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nakonways.kz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:24:06 GMT
content-type: image/jpeg
last-modified: Fri, 12 May 2023 11:11:19 GMT
etag: W/"645e1ed7-7f3d"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| nakonways.kz/fonts/Roboto/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2 | 185.98.5.104 | 404 Not Found | 808 B |
URL GET HTTP/2nakonways.kz/fonts/Roboto/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2 IP185.98.5.104:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnakonways.kz Fingerprint61:82:A4:E1:C3:BD:ED:9F:55:57:92:38:FC:57:A7:E7:B6:9D:A1:D0 ValiditySat, 06 Apr 2024 08:20:49 GMT - Fri, 05 Jul 2024 08:20:48 GMT
File typeHTML document, ASCII text Hasha943672a32297727bab01c3e76977550 3a667c4b7a457ef6c586cc581d533c128737bf53 b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /fonts/Roboto/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2 HTTP/1.1
Host: nakonways.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://nakonways.kz/css/font-roboto_1.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Thu, 18 Apr 2024 06:24:06 GMT
content-type: text/html; charset=UTF-8
content-length: 808
last-modified: Mon, 09 Oct 2023 09:30:27 GMT
etag: "328-607453d8db4f5"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| nakonways.kz/fonts/Roboto/KFOmCnqEu92Fr1Mu72xKKTU1Kvnz.woff2 | 185.98.5.104 | 404 Not Found | 808 B |
URL GET HTTP/2nakonways.kz/fonts/Roboto/KFOmCnqEu92Fr1Mu72xKKTU1Kvnz.woff2 IP185.98.5.104:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnakonways.kz Fingerprint61:82:A4:E1:C3:BD:ED:9F:55:57:92:38:FC:57:A7:E7:B6:9D:A1:D0 ValiditySat, 06 Apr 2024 08:20:49 GMT - Fri, 05 Jul 2024 08:20:48 GMT
File typeHTML document, ASCII text Hasha943672a32297727bab01c3e76977550 3a667c4b7a457ef6c586cc581d533c128737bf53 b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /fonts/Roboto/KFOmCnqEu92Fr1Mu72xKKTU1Kvnz.woff2 HTTP/1.1
Host: nakonways.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://nakonways.kz/css/font-roboto_1.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Thu, 18 Apr 2024 06:24:06 GMT
content-type: text/html; charset=UTF-8
content-length: 808
last-modified: Mon, 09 Oct 2023 09:30:27 GMT
etag: "328-607453d8db4f5"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| nakonways.kz/js/tgwallpaper.min_3.js | 185.98.5.104 | 200 OK | 2.1 kB |
URL GET HTTP/2nakonways.kz/js/tgwallpaper.min_3.js IP185.98.5.104:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnakonways.kz Fingerprint61:82:A4:E1:C3:BD:ED:9F:55:57:92:38:FC:57:A7:E7:B6:9D:A1:D0 ValiditySat, 06 Apr 2024 08:20:49 GMT - Fri, 05 Jul 2024 08:20:48 GMT
File typeASCII text, with very long lines (2979), with no line terminators Hash2b89d34702716a8ad2cc3977718f53a3 04406ebd6a9e2ce79dbac5e5048cfe1384e4574a 2031e418ee10af8110729b3f327b968462fc0a9d8d1da095387bb472ccd0dee6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /js/tgwallpaper.min_3.js HTTP/1.1
Host: nakonways.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nakonways.kz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:24:06 GMT
content-type: application/javascript
last-modified: Thu, 22 Dec 2022 11:12:32 GMT
etag: W/"63a43ba0-ba3"
content-encoding: br
X-Firefox-Spdy: h2
|
|
| nakonways.kz/css/bootstrap.min_3.css | 185.98.5.104 | 200 OK | 42 kB |
URL GET HTTP/2nakonways.kz/css/bootstrap.min_3.css IP185.98.5.104:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnakonways.kz Fingerprint61:82:A4:E1:C3:BD:ED:9F:55:57:92:38:FC:57:A7:E7:B6:9D:A1:D0 ValiditySat, 06 Apr 2024 08:20:49 GMT - Fri, 05 Jul 2024 08:20:48 GMT
File typeASCII text, with very long lines (42164), with CRLF line terminators Hash9bd1aa6ec80f258e0195e28444167fa0 8f74fb90f48177f0125f7addf91b4285e76d9d6b 63db15f00ab6b5a8cf92bff0cd98448c373732d7d3d4edc9c7a3b4d129e9627c
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /css/bootstrap.min_3.css HTTP/1.1
Host: nakonways.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nakonways.kz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:24:06 GMT
content-type: text/css
last-modified: Thu, 22 Dec 2022 11:12:26 GMT
etag: W/"63a43b9a-a624"
content-encoding: br
X-Firefox-Spdy: h2
|
|
| nakonways.kz/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 | 185.98.5.104 | 404 Not Found | 808 B |
URL GET HTTP/2nakonways.kz/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 IP185.98.5.104:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnakonways.kz Fingerprint61:82:A4:E1:C3:BD:ED:9F:55:57:92:38:FC:57:A7:E7:B6:9D:A1:D0 ValiditySat, 06 Apr 2024 08:20:49 GMT - Fri, 05 Jul 2024 08:20:48 GMT
File typeHTML document, ASCII text, with very long lines (866), with no line terminators Hashb45bdabc5c2538b0c4e5f352bcdfb585 5a97ce87ce8d3d86a043c1a5e68e968e20a1e146 c96189c857253fcdbe13dfcbc7f919050fae21ccb7116c3078ee3c8d8d0f12c7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 HTTP/1.1
Host: nakonways.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://nakonways.kz/css/font-roboto_1.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Thu, 18 Apr 2024 06:24:06 GMT
content-type: text/html; charset=UTF-8
content-length: 808
last-modified: Mon, 09 Oct 2023 09:30:27 GMT
etag: "328-607453d8db4f5"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| | 185.98.5.104 | 200 OK | 12 kB |
URL User Request GET HTTP/2IP185.98.5.104:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnakonways.kz Fingerprint61:82:A4:E1:C3:BD:ED:9F:55:57:92:38:FC:57:A7:E7:B6:9D:A1:D0 ValiditySat, 06 Apr 2024 08:20:49 GMT - Fri, 05 Jul 2024 08:20:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: nakonways.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:24:06 GMT
content-type: text/html; charset=UTF-8
last-modified: Thu, 15 Jun 2023 10:04:08 GMT
etag: W/"648ae218-3091"
content-encoding: br
X-Firefox-Spdy: h2
|
|
| nakonways.kz/img/tgme/pattern.svg | 185.98.5.104 | 200 OK | 231 kB |
URL GET HTTP/2nakonways.kz/img/tgme/pattern.svg IP185.98.5.104:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnakonways.kz Fingerprint61:82:A4:E1:C3:BD:ED:9F:55:57:92:38:FC:57:A7:E7:B6:9D:A1:D0 ValiditySat, 06 Apr 2024 08:20:49 GMT - Fri, 05 Jul 2024 08:20:48 GMT
File typeSVG Scalable Vector Graphics image Size231 kB (230871 bytes) Hash7410ea0072f4df1e149a15a2bd924738 8878c8b4987cdb3c467fb5f14becedf9202e576f daa086b24cbd2610eb3261446100ff513a4526c5b2bce41e758629f5cd8a6a20
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /img/tgme/pattern.svg HTTP/1.1
Host: nakonways.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nakonways.kz/css/telegram_232.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:24:06 GMT
content-type: image/svg+xml
last-modified: Thu, 22 Dec 2022 11:12:29 GMT
etag: W/"63a43b9d-385d7"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| nakonways.kz/img/apple-touch-icon.png | 185.98.5.104 | 200 OK | 5.6 kB |
URL GET HTTP/2nakonways.kz/img/apple-touch-icon.png IP185.98.5.104:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnakonways.kz Fingerprint61:82:A4:E1:C3:BD:ED:9F:55:57:92:38:FC:57:A7:E7:B6:9D:A1:D0 ValiditySat, 06 Apr 2024 08:20:49 GMT - Fri, 05 Jul 2024 08:20:48 GMT
File typePNG image data, 180 x 180, 8-bit/color RGB, non-interlaced Hash295ccdb03006b8dfef45090dafbd46ac 491ab660270e47cbac6a5731c51cca71c1c1b2b1 a51d667d4262047c23e3a2a8aac3b46dc8a58c686cc013f2354011c07bf22cf3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /img/apple-touch-icon.png HTTP/1.1
Host: nakonways.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nakonways.kz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:24:07 GMT
content-type: image/png
last-modified: Thu, 22 Dec 2022 11:12:28 GMT
etag: W/"63a43b9c-160c"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| nakonways.kz/css/font-roboto_1.css | 185.98.5.104 | 200 OK | 6.7 kB |
URL GET HTTP/2nakonways.kz/css/font-roboto_1.css IP185.98.5.104:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnakonways.kz Fingerprint61:82:A4:E1:C3:BD:ED:9F:55:57:92:38:FC:57:A7:E7:B6:9D:A1:D0 ValiditySat, 06 Apr 2024 08:20:49 GMT - Fri, 05 Jul 2024 08:20:48 GMT
File typeASCII text, with very long lines (7104), with no line terminators Hashca2d493c3546f0b2feca043dce68afe0 2cffd4641fbb3d0672a7b8549f5a8ecd7ea557b1 0a58dcb5dac4c4c706e2aad8b41caf256e4ea86fe80ba9243916a86a646ca821
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /css/font-roboto_1.css HTTP/1.1
Host: nakonways.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nakonways.kz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:24:06 GMT
content-type: text/css
last-modified: Thu, 22 Dec 2022 11:12:26 GMT
etag: W/"63a43b9a-1a48"
content-encoding: br
X-Firefox-Spdy: h2
|
|
| nakonways.kz/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 | 185.98.5.104 | 404 Not Found | 808 B |
URL GET HTTP/2nakonways.kz/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 IP185.98.5.104:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnakonways.kz Fingerprint61:82:A4:E1:C3:BD:ED:9F:55:57:92:38:FC:57:A7:E7:B6:9D:A1:D0 ValiditySat, 06 Apr 2024 08:20:49 GMT - Fri, 05 Jul 2024 08:20:48 GMT
File typeHTML document, ASCII text, with very long lines (866), with no line terminators Hashb45bdabc5c2538b0c4e5f352bcdfb585 5a97ce87ce8d3d86a043c1a5e68e968e20a1e146 c96189c857253fcdbe13dfcbc7f919050fae21ccb7116c3078ee3c8d8d0f12c7
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1
Host: nakonways.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://nakonways.kz/css/font-roboto_1.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Thu, 18 Apr 2024 06:24:06 GMT
content-type: text/html; charset=UTF-8
content-length: 808
last-modified: Mon, 09 Oct 2023 09:30:27 GMT
etag: "328-607453d8db4f5"
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| nakonways.kz/css/telegram_232.css | 185.98.5.104 | 200 OK | 122 kB |
URL GET HTTP/2nakonways.kz/css/telegram_232.css IP185.98.5.104:443 ASN#207333 LLP Kompaniya Hoster.KZ
CertificateIssuerLet's Encrypt Subjectnakonways.kz Fingerprint61:82:A4:E1:C3:BD:ED:9F:55:57:92:38:FC:57:A7:E7:B6:9D:A1:D0 ValiditySat, 06 Apr 2024 08:20:49 GMT - Fri, 05 Jul 2024 08:20:48 GMT
File typeASCII text, with very long lines (1862), with CRLF line terminators Size122 kB (122448 bytes) Hash4cf6f5f2896f44ce2c706a70c0a0042f eb349cc47771d9812a2a221de896eb187f53a777 9231ebed71118b4d1d99ac92a995477abed458882e73bc5d2752c93d82364e7d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /css/telegram_232.css HTTP/1.1
Host: nakonways.kz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nakonways.kz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 18 Apr 2024 06:24:06 GMT
content-type: text/css
last-modified: Thu, 22 Dec 2022 11:12:27 GMT
etag: W/"63a43b9b-1de50"
content-encoding: br
X-Firefox-Spdy: h2
|
|
| telegram.org/img/website_icon.svg?4 |  149.154.167.99 | 200 OK | 1.9 kB |
URL GET HTTP/2telegram.org/img/website_icon.svg?4 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30 ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File typeSVG Scalable Vector Graphics image Hash5caca7ae1cffb3da0b06150a15020005 04cfb934f238d33209406393a3fbf78454815739 1ea747a06fbc240c2594a8c523cb248bbda4784f0fcad9d0f06334f1a378604f
GET /img/website_icon.svg?4 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nakonways.kz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 18 Apr 2024 06:24:07 GMT
content-type: image/svg+xml
last-modified: Mon, 20 Jul 2020 20:41:37 GMT
etag: W/"5f160181-768"
expires: Mon, 22 Apr 2024 06:24:07 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|