| theworldsinvesing.click/R2mBA06CJ2OGU1qpMs3MeLG8cdrRsnk8KfI0cNGjeumcD7FT3EzbHo90maKXeKIWGExI9Y1r8LNXKF4wyqoXlXgyw-Ep2z99La17WCZbcE1aAl0ZNYqAa7lSx6BToECTUA5MhhAXmJSL4kfYkpNRzDQX2d6WP8E4LF-z_RnIFlywA32l-0C0RzRNv9HtEfiAZpaQNRgI09od729sV7WWbaUsfXLhj7UQ98LTrxQBN6P8WDHWnVGxJJC6KR.jpg | 104.21.81.54 | 200 OK | 22 kB |
URL GET HTTP/3theworldsinvesing.click/R2mBA06CJ2OGU1qpMs3MeLG8cdrRsnk8KfI0cNGjeumcD7FT3EzbHo90maKXeKIWGExI9Y1r8LNXKF4wyqoXlXgyw-Ep2z99La17WCZbcE1aAl0ZNYqAa7lSx6BToECTUA5MhhAXmJSL4kfYkpNRzDQX2d6WP8E4LF-z_RnIFlywA32l-0C0RzRNv9HtEfiAZpaQNRgI09od729sV7WWbaUsfXLhj7UQ98LTrxQBN6P8WDHWnVGxJJC6KR.jpg IP104.21.81.54:443
Requested byhttps://theworldsinvesing.click/ CertificateIssuerGoogle Trust Services LLC Subjecttheworldsinvesing.click FingerprintD8:E7:B7:90:CD:6A:B7:14:DA:3C:19:1E:08:B1:82:B8:62:26:01:32 ValiditySun, 31 Mar 2024 12:39:11 GMT - Sat, 29 Jun 2024 12:39:10 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x320, components 3 Hashae91f8936c07ac69b8dedd6d27a7e65f 5442812d300f242936a25960e88fbc640719f488 b6a05933bcd350d072b4cbce5178f6fd2d9e538dccfe193f5499fa2a8f1aa9c9
Analyzer | Verdict | Alert | OpenPhish | phishing | Telegram |
GET /R2mBA06CJ2OGU1qpMs3MeLG8cdrRsnk8KfI0cNGjeumcD7FT3EzbHo90maKXeKIWGExI9Y1r8LNXKF4wyqoXlXgyw-Ep2z99La17WCZbcE1aAl0ZNYqAa7lSx6BToECTUA5MhhAXmJSL4kfYkpNRzDQX2d6WP8E4LF-z_RnIFlywA32l-0C0RzRNv9HtEfiAZpaQNRgI09od729sV7WWbaUsfXLhj7UQ98LTrxQBN6P8WDHWnVGxJJC6KR.jpg HTTP/1.1
Host: theworldsinvesing.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theworldsinvesing.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:40:11 GMT
content-type: image/jpeg
content-length: 21652
last-modified: Mon, 05 Feb 2024 13:04:24 GMT
etag: "65c0dcd8-5494"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LlyrRUvMGluoaOJp6w35ZN3ugMX%2BcUiv%2B1yP0iIHHUPWNbQSTq8836DyReeSnSexElCS3wjJbZLca36I2oaSXXSOE1F8zc%2BFKllXEQ0NSrZiYP0%2FplP371%2BWI4zDe00evAvOpTEsDX%2Fd9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7ab78298e1c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theworldsinvesing.click/images/apple-touch-icon.png | 104.21.81.54 | 200 OK | 5.6 kB |
URL GET HTTP/3theworldsinvesing.click/images/apple-touch-icon.png IP104.21.81.54:443
Requested byhttps://theworldsinvesing.click/ CertificateIssuerGoogle Trust Services LLC Subjecttheworldsinvesing.click FingerprintD8:E7:B7:90:CD:6A:B7:14:DA:3C:19:1E:08:B1:82:B8:62:26:01:32 ValiditySun, 31 Mar 2024 12:39:11 GMT - Sat, 29 Jun 2024 12:39:10 GMT
File typePNG image data, 180 x 180, 8-bit/color RGB, non-interlaced Hash295ccdb03006b8dfef45090dafbd46ac 491ab660270e47cbac6a5731c51cca71c1c1b2b1 a51d667d4262047c23e3a2a8aac3b46dc8a58c686cc013f2354011c07bf22cf3
Analyzer | Verdict | Alert | OpenPhish | phishing | Telegram |
GET /images/apple-touch-icon.png HTTP/1.1
Host: theworldsinvesing.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theworldsinvesing.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:40:11 GMT
content-type: image/png
content-length: 5644
last-modified: Mon, 05 Feb 2024 13:04:26 GMT
etag: "65c0dcda-160c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bc4UWxPy32Lz3ArMBbVZR9uqrQ5C1Igjz0eYP2egbcW%2F8%2FAsXLzx%2BWvpguLIUYa2M%2Fr7L1zYPiwJyEeyJLJKhcVsXCnbE6Zcmx42Ul07wFKi%2F6swT70JWR79PBsiI3jy7MHXVmH4eEVjmw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7ab797a9c1c0e-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theworldsinvesing.click/css/bootstrap.min.css | 104.21.81.54 | 200 OK | 42 kB |
URL GET HTTP/3theworldsinvesing.click/css/bootstrap.min.css IP104.21.81.54:443
Requested byhttps://theworldsinvesing.click/ CertificateIssuerGoogle Trust Services LLC Subjecttheworldsinvesing.click FingerprintD8:E7:B7:90:CD:6A:B7:14:DA:3C:19:1E:08:B1:82:B8:62:26:01:32 ValiditySun, 31 Mar 2024 12:39:11 GMT - Sat, 29 Jun 2024 12:39:10 GMT
File typeASCII text, with very long lines (42164) Hashc2656e265ef58a9cc9f4b70b15da5fb9 85c5ebdb89d4574d72688c2650d4b84b9b09770a f1d083ffaa644c708f11db29707aa57c19246e6d32643b03fee3f82c17b224b3
Analyzer | Verdict | Alert | OpenPhish | phishing | Telegram |
GET /css/bootstrap.min.css HTTP/1.1
Host: theworldsinvesing.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theworldsinvesing.click/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:40:11 GMT
content-type: text/css
last-modified: Mon, 05 Feb 2024 13:04:30 GMT
etag: W/"65c0dcde-a61b"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xsdJnidVMBeNJmGmxsiH4J8fSAufCXGRIvj2YkTVny%2FK5WnupuOwXbMrfEK3K882td4N%2Bs2JSpcr8o08%2FzyPctmw1uQsnf49cvLbRhpw50ssNXBv9bD%2BVbVJdMRhiGilmvXA8lTUL8bP%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7ab78298c1c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| theworldsinvesing.click/tgwallpaper.min.js?3 | 104.21.81.54 | 200 OK | 3.0 kB |
URL GET HTTP/3theworldsinvesing.click/tgwallpaper.min.js?3 IP104.21.81.54:443
Requested byhttps://theworldsinvesing.click/ CertificateIssuerGoogle Trust Services LLC Subjecttheworldsinvesing.click FingerprintD8:E7:B7:90:CD:6A:B7:14:DA:3C:19:1E:08:B1:82:B8:62:26:01:32 ValiditySun, 31 Mar 2024 12:39:11 GMT - Sat, 29 Jun 2024 12:39:10 GMT
File typeASCII text, with very long lines (2998), with no line terminators Hashf03422dc797fd26a3834b1ec041128ed a6e88f4fe48b749c2b7360e8e004f64b6cfffb1a 046ec6b7909d0ca5cc6ef271a1b57b2f2be0bd88e3495fd8c496f1524e8ffaac
Analyzer | Verdict | Alert | OpenPhish | phishing | Telegram |
GET /tgwallpaper.min.js?3 HTTP/1.1
Host: theworldsinvesing.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theworldsinvesing.click/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:40:11 GMT
content-type: application/javascript
last-modified: Mon, 05 Feb 2024 13:04:22 GMT
etag: W/"65c0dcd6-ba3"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yllN21DC1UNciINN6uOnfM6hGRsw%2F4RZt07s89VGW2ssqv8iNmZtwzX16oWu%2FQGGh%2BBg3ZZh6wPg4tWk0fco9aWPbzNBTqKsxzrPOXlH9K%2FCliiZIzvK2V0WZwI%2BjEPmARJ1jZDhnvGe7g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7ab7829901c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| theworldsinvesing.click/fonts/pattern_1.svg | 104.21.81.54 | 200 OK | 231 kB |
URL GET HTTP/3theworldsinvesing.click/fonts/pattern_1.svg IP104.21.81.54:443
Requested byhttps://theworldsinvesing.click/ CertificateIssuerGoogle Trust Services LLC Subjecttheworldsinvesing.click FingerprintD8:E7:B7:90:CD:6A:B7:14:DA:3C:19:1E:08:B1:82:B8:62:26:01:32 ValiditySun, 31 Mar 2024 12:39:11 GMT - Sat, 29 Jun 2024 12:39:10 GMT
File typeSVG Scalable Vector Graphics image Size231 kB (230871 bytes) Hash7410ea0072f4df1e149a15a2bd924738 8878c8b4987cdb3c467fb5f14becedf9202e576f daa086b24cbd2610eb3261446100ff513a4526c5b2bce41e758629f5cd8a6a20
Analyzer | Verdict | Alert | OpenPhish | phishing | Telegram |
GET /fonts/pattern_1.svg HTTP/1.1
Host: theworldsinvesing.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theworldsinvesing.click/css/telegram.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:40:11 GMT
content-type: image/svg+xml
last-modified: Mon, 05 Feb 2024 13:04:26 GMT
etag: W/"65c0dcda-385d7"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4594
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MscOxm3xfXkTmZ29JVy160Nxg%2BcXwQzJnFZHM2RTVKzfSHBjvP0fGGElMthNLzu5rXo5vferq%2BfJEpuq%2BuckH8z%2B5m15RFiDIr19i%2FbY8ANHLXbBWMd%2BCPZQKBvCYa60TWZ19qAzipQ8Qw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7ab78fa391c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| telegram.org/img/website_icon.svg?4 | 149.154.167.99 | 200 OK | 1.9 kB |
URL GET HTTP/2telegram.org/img/website_icon.svg?4 IP149.154.167.99:443 ASN#62041 Telegram Messenger Inc
Requested byhttps://theworldsinvesing.click/ CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30 ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File typeSVG Scalable Vector Graphics image Hash5caca7ae1cffb3da0b06150a15020005 04cfb934f238d33209406393a3fbf78454815739 1ea747a06fbc240c2594a8c523cb248bbda4784f0fcad9d0f06334f1a378604f
GET /img/website_icon.svg?4 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theworldsinvesing.click/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 26 Apr 2024 15:40:11 GMT
content-type: image/svg+xml
last-modified: Mon, 20 Jul 2020 20:41:37 GMT
etag: W/"5f160181-768"
expires: Tue, 30 Apr 2024 15:40:11 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| | 104.21.81.54 | 200 OK | 10 kB |
URL User Request GET HTTP/2IP104.21.81.54:443
CertificateIssuerGoogle Trust Services LLC Subjecttheworldsinvesing.click FingerprintD8:E7:B7:90:CD:6A:B7:14:DA:3C:19:1E:08:B1:82:B8:62:26:01:32 ValiditySun, 31 Mar 2024 12:39:11 GMT - Sat, 29 Jun 2024 12:39:10 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | OpenPhish | phishing | Telegram |
GET / HTTP/1.1
Host: theworldsinvesing.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 15:40:10 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kT1soxkPR3knpZdZyAFP5Sc4Dy9NJX%2Bvd0tP3rwCJK125aL%2B6fg7KI2JrTtXF1bw7MyyjTF%2Fmd%2B8McaNYVkdZgTY8AyevEiHjZkHGB5kvHj%2BqdZotYA3QRDX0fXmQdzDUqyRxBmpFlxOYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a7ab766d1ab4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| djjurney.com/css_1 | 0.0.0.0 | | 0 B |
IP0.0.0.0:0
Requested byhttps://theworldsinvesing.click/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /css_1 HTTP/1.1
Host: djjurney.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theworldsinvesing.click/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| theworldsinvesing.click/css/telegram.css | 104.21.81.54 | 200 OK | 119 kB |
URL GET HTTP/3theworldsinvesing.click/css/telegram.css IP104.21.81.54:443
Requested byhttps://theworldsinvesing.click/ CertificateIssuerGoogle Trust Services LLC Subjecttheworldsinvesing.click FingerprintD8:E7:B7:90:CD:6A:B7:14:DA:3C:19:1E:08:B1:82:B8:62:26:01:32 ValiditySun, 31 Mar 2024 12:39:11 GMT - Sat, 29 Jun 2024 12:39:10 GMT
File typeASCII text, with very long lines (1862) Size119 kB (118699 bytes) Hashbdbeb36b3ff1c16410dddaee3f2f2155 778ff02d9b16f1c7fd8c56703a1b420cc6353b81 0f21a0a7a318fbd83f4132f42c0ba38f6ace5607853346721f4af83ff003b9f0
Analyzer | Verdict | Alert | OpenPhish | phishing | Telegram |
GET /css/telegram.css HTTP/1.1
Host: theworldsinvesing.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theworldsinvesing.click/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 15:40:10 GMT
content-type: text/css
last-modified: Mon, 05 Feb 2024 13:04:30 GMT
etag: W/"65c0dcde-1cfab"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4593
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zeD4JKPEl%2FGbL5KbwXsYDed%2BcXf0RBv7sf9bZsN1olvx%2Fy5RAAq51CdjObMWs06r07zGaOAKBTM9nFEm1Hla22KnPT%2FAXnRNTgWn5yt9pBRRRGzKmd20R%2FVt3syfG5NYAylSwZKpDKo2Kg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a7ab78298d1c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|