| telegrambots.pages.dev/assets/Telegram_2019_Logo.svg.webp |  188.114.97.1 | 200 OK | 22 kB |
URL GET HTTP/3telegrambots.pages.dev/assets/Telegram_2019_Logo.svg.webp IP188.114.97.1:443
Requested byhttps://telegrambots.pages.dev/ CertificateIssuerLet's Encrypt Subjecttelegrambots.pages.dev Fingerprint51:93:C1:16:61:BC:67:09:51:F1:36:6C:AD:59:17:9D:DF:03:06:90 ValiditySat, 06 Apr 2024 12:28:29 GMT - Fri, 05 Jul 2024 12:28:28 GMT
File typeRIFF (little-endian) data, Web/P image Hashd00383cc1dfb8bbdb5032231fac92dda c0e3237bba54aef7efdb6656da3d2a82b1089a78 98142decf694e1d7a868be758d902b85f29c3052351692ce3bd52f2e1e803f4f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /assets/Telegram_2019_Logo.svg.webp HTTP/1.1
Host: telegrambots.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telegrambots.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 17:45:32 GMT
content-type: image/webp
content-length: 22378
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "a2bf01f0eaf3e784d8ef9b47729d4ca8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h56Yw21QVN%2BLXtRTLBq5Y5sXcIididclgiG9tPuqg8MojQCjBefZfoAzAbdAMssot9m7HVTpWtsmadGytfMhdPhXECPuurrTzzDa%2F7eOasJwpd5xaNey7Ua3bzLbZb9K%2FpR1aemzP6pp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797e85cd8645684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css |  151.101.1.229 | 200 OK | 35 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css IP151.101.1.229:443
Requested byhttps://telegrambots.pages.dev/ CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeUnicode text, UTF-8 text, with very long lines (65342) Hashcd822b7fd22c8a95a68470c795adea69 1f139981b9b47a766efa0a61bb78ada351f16c4b 3017df4a76db5f01c2b99b603d88b03106df13bcfe18e67b7c13c2341d3a67df
GET /npm/bootstrap@5.3.2/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telegrambots.pages.dev/
Origin: https://telegrambots.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.3.2
x-jsd-version-type: version
etag: W/"38df4-HxOZgbm0enZu+gphu3ito1HxbEs"
content-encoding: br
accept-ranges: bytes
date: Wed, 24 Apr 2024 17:45:33 GMT
age: 5101861
x-served-by: cache-fra-etou8220083-FRA, cache-hel1410033-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 34902
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/@popperjs/core@2.11.8/dist/umd/popper.min.js | 151.101.1.229 | 200 OK | 7.7 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/@popperjs/core@2.11.8/dist/umd/popper.min.js IP151.101.1.229:443
Requested byhttps://telegrambots.pages.dev/ CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text, with very long lines (20033) Hash31032b08bd8e72220462d3f54f8bd69a 871d6ef1070bd363ea390e0c8c384e47dce7f389 c212f4b505a86352aed62b24a8f16f999f821ecbe6456c7f3c8a04bc87968782
GET /npm/@popperjs/core@2.11.8/dist/umd/popper.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telegrambots.pages.dev/
Origin: https://telegrambots.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 2.11.8
x-jsd-version-type: version
etag: W/"4e9a-hx1u8QcL02PqOQ4MjDhOR9zn84k"
content-encoding: br
accept-ranges: bytes
date: Wed, 24 Apr 2024 17:45:33 GMT
age: 9137949
x-served-by: cache-fra-eddf8230047-FRA, cache-hel1410033-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7651
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js | 151.101.1.229 | 200 OK | 25 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js IP151.101.1.229:443
Requested byhttps://telegrambots.pages.dev/ CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text, with very long lines (65299) Hash6baf57f25796c332144ed58a2a0cd9ee f7fd0f3dc84b2cf93bf81e832505a673f354e0a3 82f64f62bb03c1bc1824b0f9c9e05f70dba33e146818e63cdf5c306c8cf3dedd
GET /npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telegrambots.pages.dev/
Origin: https://telegrambots.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.3.2
x-jsd-version-type: version
etag: W/"13b17-9/0PPchLLPk7+B6DJQWmc/NU4KM"
content-encoding: br
accept-ranges: bytes
date: Wed, 24 Apr 2024 17:45:33 GMT
age: 1450866
x-served-by: cache-fra-etou8220085-FRA, cache-hel1410033-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 25109
X-Firefox-Spdy: h2
|
|
| | 188.114.97.1 | 200 OK | 22 kB |
URL User Request GET HTTP/2IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subjecttelegrambots.pages.dev Fingerprint51:93:C1:16:61:BC:67:09:51:F1:36:6C:AD:59:17:9D:DF:03:06:90 ValiditySat, 06 Apr 2024 12:28:29 GMT - Fri, 05 Jul 2024 12:28:28 GMT
File typeHTML document, ASCII text, with very long lines (3442) Hash89f3a8ef10de8a4cfefd9c60d2d9af73 2238b1ceece264f41ede77d72fafc285ee76001a 4aedf2717bd7902e425ca7264759e162f0f2f517c82358d80be88679ba47d559
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: telegrambots.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 24 Apr 2024 17:45:32 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"d794ebdc01d1b4455622b6467d71595f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=36CHLsd2%2FaiUHAm1sYb30Za3xabWxM3dzqHDuEpSUf1vaD720Gq5jfqsxUo%2F4yCsYMVDyWS2z0aV0umLT08QU3S07%2FiOQ0nakg3mM3RLMGAZTzwcORnXM%2BSCzNBBpp2lbLYkfvYfnBNa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797e85b4e6f56ca-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| telegrambots.pages.dev/assets/image_processing20210405-32501-doifx3.gif | 188.114.97.1 | 200 OK | 788 kB |
URL GET HTTP/3telegrambots.pages.dev/assets/image_processing20210405-32501-doifx3.gif IP188.114.97.1:443
Requested byhttps://telegrambots.pages.dev/ CertificateIssuerLet's Encrypt Subjecttelegrambots.pages.dev Fingerprint51:93:C1:16:61:BC:67:09:51:F1:36:6C:AD:59:17:9D:DF:03:06:90 ValiditySat, 06 Apr 2024 12:28:29 GMT - Fri, 05 Jul 2024 12:28:28 GMT
File typeGIF image data, version 89a, 800 x 600 Size788 kB (788161 bytes) Hashb32304d81324ff9d8bb4474d2ab7496c 3ebf763e2a9995999322244346c3b34d73bb10cc 9c0296dec53f5a9a0a12f4a94a49e474e9e5d4385eaed4e972cc0093c283c247
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /assets/image_processing20210405-32501-doifx3.gif HTTP/1.1
Host: telegrambots.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telegrambots.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 17:45:33 GMT
content-type: image/gif
content-length: 788161
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "97e4d3a647fb766083d6d1abd8641aba"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RiJ3xhGgAi%2BV%2BqF4xK%2B5mGODglgZsgt7kUM8AMvnhqBYYAvrmBeM9lDz4swMgHG5K4TtPoECRaazRFJWfpV1XoxjdvMKjzjJ7c96F0fa%2BxvHuPFmBscSRtzMxDzrvN7BNtRsvGBszO4F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797e85e3a835684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| telegrambots.pages.dev/assets/telegram_d.gif | 188.114.97.1 | 200 OK | 4.5 MB |
URL GET HTTP/3telegrambots.pages.dev/assets/telegram_d.gif IP188.114.97.1:443
Requested byhttps://telegrambots.pages.dev/ CertificateIssuerLet's Encrypt Subjecttelegrambots.pages.dev Fingerprint51:93:C1:16:61:BC:67:09:51:F1:36:6C:AD:59:17:9D:DF:03:06:90 ValiditySat, 06 Apr 2024 12:28:29 GMT - Fri, 05 Jul 2024 12:28:28 GMT
File typeGIF image data, version 89a, 800 x 600 Size4.5 MB (4534082 bytes) Hash19421ae619d3461528bac553b4bf8674 7ebaa109336c9a8fc09c046f6ad89c6cd09f42a2 6944e8962f27f32ea21c849d36a3fecc9f316400badc4ce7b1a112498e159050
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /assets/telegram_d.gif HTTP/1.1
Host: telegrambots.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telegrambots.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 24 Apr 2024 17:45:33 GMT
content-type: image/gif
content-length: 4534082
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ca46a1e8ec8f9e1318a643f3ab1f6420"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uf89UMcIvD%2B3aG6cYvR2I%2FUuyfq%2Fy9ysrP%2Fe4xRTh94ItNgsu%2BMG0KonVIybBHPsMXpHmxxbOxo73rF2G2uBHnrwt%2Fi1Nc3s6C%2FDYmSxs%2BhUbIgOonZgGsxJQG%2BOmn5K67eF8WzkyYhI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797e85e3a845684-OSL
alt-svc: h3=":443"; ma=86400
|
|
| telegrambots.pages.dev/assets/font-roboto.css | 188.114.97.1 | 200 OK | 6.2 kB |
URL GET HTTP/3telegrambots.pages.dev/assets/font-roboto.css IP188.114.97.1:443
Requested byhttps://telegrambots.pages.dev/ CertificateIssuerLet's Encrypt Subjecttelegrambots.pages.dev Fingerprint51:93:C1:16:61:BC:67:09:51:F1:36:6C:AD:59:17:9D:DF:03:06:90 ValiditySat, 06 Apr 2024 12:28:29 GMT - Fri, 05 Jul 2024 12:28:28 GMT
File typeASCII text, with very long lines (6354), with no line terminators Hashc06318a1f377e388b69b104b4cefa1a6 151f067aae997487880e573876f96b8d598e64db 1a53363e667fffef8a82588191989d36e680b4d341c6b557e62bf207311a3d70
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /assets/font-roboto.css HTTP/1.1
Host: telegrambots.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telegrambots.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 17:45:32 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"05e8b5fe4c54287534cb04fad768c36e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zu5Kc%2B9K6NXDq17R%2FllQ2UNsi9NVWzLZ129oDmhTEbb5yEY7maFp0Ir3NLV6h5hg70hbIRhAN6FqKAPYW%2F7ByC2eu%2BZdjIEfQbaA9ZdnquRv7iqyoqQjch7RO4iyrvcGc92oaKCkgkZZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797e85cc8615684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| telegrambots.pages.dev/assets/pattern.svg | 188.114.97.1 | 200 OK | 232 kB |
URL GET HTTP/3telegrambots.pages.dev/assets/pattern.svg IP188.114.97.1:443
Requested byhttps://telegrambots.pages.dev/ CertificateIssuerLet's Encrypt Subjecttelegrambots.pages.dev Fingerprint51:93:C1:16:61:BC:67:09:51:F1:36:6C:AD:59:17:9D:DF:03:06:90 ValiditySat, 06 Apr 2024 12:28:29 GMT - Fri, 05 Jul 2024 12:28:28 GMT
File typeSVG Scalable Vector Graphics image Size232 kB (231706 bytes) Hashd0c22c6a97023d85ba6e644a41c44a5d 4284efb616c182da4450c123174ce0e81a322845 118add53487c02aaf5b5ab9f69380fa06717deb10492e14aaa487e3c62806ad4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /assets/pattern.svg HTTP/1.1
Host: telegrambots.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telegrambots.pages.dev/assets/telegram.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 17:45:33 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"234367be23190ecf425d06cfae608b42"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6Vf2mV4oP89%2BUBB5X%2FtCbRzcSf7AIHKJU0%2F54DjEBn2KoT%2FN4Ftou3say67FKA1fZVFkik3Cjr6ianYTeKBUHbqOth8vto2JKctA%2BfnkS0RpOhBe7W%2BFC6MF2QheAua%2BajYSrxrXsyFH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797e85e3a815684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| telegrambots.pages.dev/favicon.ico | 188.114.97.1 | 200 OK | 12 kB |
URL GET HTTP/3telegrambots.pages.dev/favicon.ico IP188.114.97.1:443
Requested byhttps://telegrambots.pages.dev/ CertificateIssuerLet's Encrypt Subjecttelegrambots.pages.dev Fingerprint51:93:C1:16:61:BC:67:09:51:F1:36:6C:AD:59:17:9D:DF:03:06:90 ValiditySat, 06 Apr 2024 12:28:29 GMT - Fri, 05 Jul 2024 12:28:28 GMT
File typeHTML document, ASCII text, with very long lines (3442) Hash89f3a8ef10de8a4cfefd9c60d2d9af73 2238b1ceece264f41ede77d72fafc285ee76001a 4aedf2717bd7902e425ca7264759e162f0f2f517c82358d80be88679ba47d559
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: telegrambots.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telegrambots.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 17:45:33 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"d794ebdc01d1b4455622b6467d71595f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c30As0mUzjI48ejBGBzfN2wpM2afwpULUeFnoFqvh6FiEI725wr4kAosmI%2FzJAuNjHAZ%2BzYrWs80E1OpORH%2FecUO9kr7yL2IzeZMVwtiqx93hEiN9QynXD%2BUzZ8G86HzEkcRQlVH%2F0dz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797e85f8ca25684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| telegrambots.pages.dev/assets/telegram.css | 188.114.97.1 | 200 OK | 2.8 kB |
URL GET HTTP/3telegrambots.pages.dev/assets/telegram.css IP188.114.97.1:443
Requested byhttps://telegrambots.pages.dev/ CertificateIssuerLet's Encrypt Subjecttelegrambots.pages.dev Fingerprint51:93:C1:16:61:BC:67:09:51:F1:36:6C:AD:59:17:9D:DF:03:06:90 ValiditySat, 06 Apr 2024 12:28:29 GMT - Fri, 05 Jul 2024 12:28:28 GMT
File typeASCII text, with very long lines (2923), with no line terminators Hash5c628bd4134988e736e1bd0026c51e3b 0b93249c13c52beb1240f98d9a6eb5ca7e6fa0b0 6bdc05aafef53b2893dd8035f6bf4546a0d34f9d6f4cafb78ce5b485dc37f6f9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /assets/telegram.css HTTP/1.1
Host: telegrambots.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telegrambots.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 24 Apr 2024 17:45:32 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"aab5e5d248ac209ea1a1ab5c41d69ebe"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WygtRkg%2BmT36gWEFJ7chpY2vpPm%2FeY6Lw5pVXQ4o8YRW2VjyBgBf5hjX%2FpZtLDGBZcLnUuMmE0YOE4PkJy7G3Mjry5hEF6zoT3RvRz05DIshYNf8V8IaoVNHGZVySvt16EtqGvA2XbTG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8797e85cc8625684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.min.js | 151.101.1.229 | 200 OK | 61 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.min.js IP151.101.1.229:443
Requested byhttps://telegrambots.pages.dev/ CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text, with very long lines (60298) Hashf63dfbdcc649f13af4791a90e51f7907 b3cacef9fccfa42aaebd61f046f2123eca598973 60c6bec0033a424572cfdf7da1d5fb94f4719286006a7f2cb9e76ee24d99babf
GET /npm/bootstrap@5.3.2/dist/js/bootstrap.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telegrambots.pages.dev/
Origin: https://telegrambots.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.3.2
x-jsd-version-type: version
etag: W/"eca1-s8rO+fzPpCquvWHwRvISPspZiXM"
content-encoding: br
accept-ranges: bytes
date: Wed, 24 Apr 2024 17:45:33 GMT
age: 14557531
x-served-by: cache-fra-eddf8230044-FRA, cache-hel1410033-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 17719
X-Firefox-Spdy: h2
|
|