Report - teiegrem.cn/

Report Overview

Submitted URL
teiegrem.cn/
IP
45.249.92.89
ASN
#133115 HK Kwaifong Group Limited
Submitted
2024-05-04 11:03:06
Access
public
Website Title
Server Not Found
Final URL
about:neterror?e=dnsNotFound&u=https%3A//aj9.telecran.cc/&c=UTF-8&d=We%20can%E2%80%99t%20connect%20to%20the%20server%20at%20aj9.telecran.cc.
Tags
telegram phishing
urlquery detections
Phishing - Telegram

Detections

urlquery
12
Network Intrusion Detection
0
Threat Detection Systems
30

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
teiegrem.cn	unknown	unknown	No data	No data	4.7 kB	265 kB	45.249.92.89
aj9.telecran.cc	unknown	2023-10-19	2023-10-26	2023-11-15	502 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	teiegrem.cn	Sinkholed
2024-05-04	medium	teiegrem.cn	Sinkholed
2024-05-04	medium	teiegrem.cn	Sinkholed
2024-05-04	medium	teiegrem.cn	Sinkholed
2024-05-04	medium	teiegrem.cn	Sinkholed
2024-05-04	medium	teiegrem.cn	Sinkholed
2024-05-04	medium	teiegrem.cn	Sinkholed
2024-05-04	medium	teiegrem.cn	Sinkholed
2024-05-04	medium	teiegrem.cn	Sinkholed
2024-05-04	medium	teiegrem.cn	Sinkholed
2024-05-04	medium	teiegrem.cn	Sinkholed
2024-05-04	medium	teiegrem.cn	Sinkholed
2024-05-04	medium	teiegrem.cn	Sinkholed
2024-05-04	medium	teiegrem.cn	Sinkholed
2024-05-04	medium	telecran.cc	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	about:neterror?e=dnsNotFound&u=https%3A//aj9.telecran.cc/&c=UTF-8&d=We%20can%E2%80%99t%20connect%20to%20the%20server%20at%20aj9.telecran.cc.	0 B	2023-03-07	2024-05-18
Pretty URL about:neterror?e=dnsNotFound&u=https%3A//aj9.telecran.cc/&c=UTF-8&d=We%20can%E2%80%99t%20connect%20to%20the%20server%20at%20aj9.telecran.cc. IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-18 07:17:20 Times Seen37774671 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (15)

URL IP Response Size

teiegrem.cn/

45.249.92.89

1.2 kB

URL
teiegrem.cn/
IP
45.249.92.89:0
ASN
#133115 HK Kwaifong Group Limited

File type
HTML document, Unicode text, UTF-8 text
Size
1.2 kB (1183 bytes)
Hash
16796ea6c709daf39799bb2ac88f5143
52153f0dc5d7093988543c3109c08b4bfe890843
1902e4086ae2f35011e3b9208f6d3b890551d71b57b406ce8ca1e8051c4ad0c5

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Telegram
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: teiegrem.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Content-Encoding: gzip
Last-Modified: Sun, 06 Aug 2023 09:56:03 GMT
Accept-Ranges: bytes
ETag: "97d6d8354cc8d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sat, 04 May 2024 11:02:40 GMT
Content-Length: 1183

teiegrem.cn/

45.249.92.89

1.2 kB

URL
teiegrem.cn/
IP
45.249.92.89:0
ASN
#133115 HK Kwaifong Group Limited

File type
HTML document, Unicode text, UTF-8 text
Size
1.2 kB (1183 bytes)
Hash
16796ea6c709daf39799bb2ac88f5143
52153f0dc5d7093988543c3109c08b4bfe890843
1902e4086ae2f35011e3b9208f6d3b890551d71b57b406ce8ca1e8051c4ad0c5

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Telegram
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: teiegrem.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/html
Content-Encoding: gzip
Last-Modified: Sun, 06 Aug 2023 09:56:03 GMT
Accept-Ranges: bytes
ETag: "97d6d8354cc8d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sat, 04 May 2024 11:02:40 GMT
Content-Length: 1183

teiegrem.cn/assets/js/location.js

45.249.92.89

184 B

URL
teiegrem.cn/assets/js/location.js
IP
45.249.92.89:0
ASN
#133115 HK Kwaifong Group Limited

File type
JavaScript source, ASCII text, with CRLF line terminators
Size
184 B (184 bytes)
Hash
cbb145e9f8efa67417b43d2752d8830b
5803241090d684e8908cc00c4299c8292a745911
7c03107e5af5b4b3ee442bb9bd7364662a10cb6de261a6414a8ec5265d94ecf3

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/location.js HTTP/1.1
Host: teiegrem.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://teiegrem.cn/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Thu, 19 Oct 2023 10:11:02 GMT
Accept-Ranges: bytes
ETag: "f9924690742da1:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sat, 04 May 2024 11:02:41 GMT
Content-Length: 184

teiegrem.cn/assets/css/bootstrap.min.css?3

45.249.92.89

12 kB

URL
teiegrem.cn/assets/css/bootstrap.min.css?3
IP
45.249.92.89:0
ASN
#133115 HK Kwaifong Group Limited

File type
assembler source, ASCII text
Size
12 kB (12267 bytes)
Hash
611a2a4d1f295c31189c0f99573e6475
4012c53d9fc57e4e23abd85e51ad81a112162f46
d7f66f63272040a0b423509a3f847bcbea8c4fdcf35e00e4db42eda52f383920

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Telegram
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/bootstrap.min.css?3 HTTP/1.1
Host: teiegrem.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://teiegrem.cn/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Sun, 06 Aug 2023 09:56:03 GMT
Accept-Ranges: bytes
ETag: "101012364cc8d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sat, 04 May 2024 11:02:41 GMT
Content-Length: 12267

teiegrem.cn/assets/download/filename.js

45.249.92.89

183 B

URL
teiegrem.cn/assets/download/filename.js
IP
45.249.92.89:0
ASN
#133115 HK Kwaifong Group Limited

File type
JavaScript source, ASCII text
Size
183 B (183 bytes)
Hash
8aeaa54f995919312bdf3f7e6edc644b
b19b07257da295c91fa177f0d5a18680a7bdeefb
46c3e913c54bb1bedec960bba15296f79719d51b6e9e265d61c370e9d9bc16b3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Telegram
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/download/filename.js HTTP/1.1
Host: teiegrem.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://teiegrem.cn/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Sun, 06 Aug 2023 09:56:04 GMT
Accept-Ranges: bytes
ETag: "1cce8c364cc8d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sat, 04 May 2024 11:02:41 GMT
Content-Length: 183

teiegrem.cn/styles.ef46db3751d8e999.css

45.249.92.89

0 B

URL
teiegrem.cn/styles.ef46db3751d8e999.css
IP
45.249.92.89:0
ASN
#133115 HK Kwaifong Group Limited

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /styles.ef46db3751d8e999.css HTTP/1.1
Host: teiegrem.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://teiegrem.cn/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Sun, 06 Aug 2023 09:55:57 GMT
Accept-Ranges: bytes
ETag: "19bc87324cc8d91:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sat, 04 May 2024 11:02:41 GMT
Content-Length: 0

teiegrem.cn/runtime.424938cfa95ce93e.js

45.249.92.89

869 B

URL
teiegrem.cn/runtime.424938cfa95ce93e.js
IP
45.249.92.89:0
ASN
#133115 HK Kwaifong Group Limited

File type
JavaScript source, ASCII text, with very long lines (1074), with no line terminators
Size
869 B (869 bytes)
Hash
73cf917dda2c7fe3752a4377e746e6c8
bc988e1089ba4ab0ced094fea7ea1780a3bbf160
bcef8c2e1a8beea07849ff623dc989ea4a0f5ccf03fe61b45bcf09c40d91fa91

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Telegram
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /runtime.424938cfa95ce93e.js HTTP/1.1
Host: teiegrem.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://teiegrem.cn/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Sun, 06 Aug 2023 09:55:57 GMT
Accept-Ranges: bytes
ETag: "d37456324cc8d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sat, 04 May 2024 11:02:41 GMT
Content-Length: 869

teiegrem.cn/polyfills.a4e58b6798c3ceaa.js

45.249.92.89

15 kB

URL
teiegrem.cn/polyfills.a4e58b6798c3ceaa.js
IP
45.249.92.89:0
ASN
#133115 HK Kwaifong Group Limited

File type
JavaScript source, ASCII text, with very long lines (33871), with no line terminators
Size
15 kB (14637 bytes)
Hash
853d01506523426fd218a2bbb6c25473
6c9fb639719ac69ce57931db3445efcb85d827c7
ce9682e997292780e4913e968eb3aa8997e2f828fd7d394ee5fb439713f22899

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Telegram
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /polyfills.a4e58b6798c3ceaa.js HTTP/1.1
Host: teiegrem.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://teiegrem.cn/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Sun, 06 Aug 2023 09:55:56 GMT
Accept-Ranges: bytes
ETag: "a8ff21324cc8d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sat, 04 May 2024 11:02:41 GMT
Content-Length: 14637

teiegrem.cn/assets/css/telegram.css?232

45.249.92.89

32 kB

URL
teiegrem.cn/assets/css/telegram.css?232
IP
45.249.92.89:0
ASN
#133115 HK Kwaifong Group Limited

File type
ASCII text, with very long lines (1862)
Size
32 kB (32258 bytes)
Hash
6e84feb995ff0a15546a637184769661
0883fe6bbbb60f8649cdcc9f9c88123ffa3c98e8
a69d6f8560fc3a768e1b1e44037d86591ceb00d5865e467147b696878b7402fa

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Telegram
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/css/telegram.css?232 HTTP/1.1
Host: teiegrem.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://teiegrem.cn/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: text/css
Content-Encoding: gzip
Last-Modified: Sun, 06 Aug 2023 09:56:03 GMT
Accept-Ranges: bytes
ETag: "855958364cc8d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sat, 04 May 2024 11:02:41 GMT
Content-Length: 32258

teiegrem.cn/assets/js/main.js?46

45.249.92.89

7.4 kB

URL
teiegrem.cn/assets/js/main.js?46
IP
45.249.92.89:0
ASN
#133115 HK Kwaifong Group Limited

File type
JavaScript source, ASCII text
Size
7.4 kB (7354 bytes)
Hash
b9caf8211f17285c697e521e95d0c39b
85d1c795afc3708dc39f8990ce296f6cc1cf55ce
c2f683f5b98d290fe846969818d8b6a90e391756a09a115d0a3b2e344747a8bd

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Telegram
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/js/main.js?46 HTTP/1.1
Host: teiegrem.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://teiegrem.cn/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Sun, 06 Aug 2023 09:56:18 GMT
Accept-Ranges: bytes
ETag: "f54d23e4cc8d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sat, 04 May 2024 11:02:41 GMT
Content-Length: 7354

teiegrem.cn/assets/img/apple-touch-icon.png

45.249.92.89

1.2 kB

URL
teiegrem.cn/assets/img/apple-touch-icon.png
IP
45.249.92.89:0
ASN
#133115 HK Kwaifong Group Limited

File type
HTML document, ISO-8859 text, with CRLF line terminators
Size
1.2 kB (1163 bytes)
Hash
8363acaeab9cbb099b59b78a44127ca6
aef448ce5500e3734059ec285cf6ec0b547075f2
9b342ae7f25d65bdb817d8c995f3211ac398e41575fc5d149d994c1dcb008f0a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Telegram
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/apple-touch-icon.png HTTP/1.1
Host: teiegrem.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://teiegrem.cn/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Content-Type: text/html
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sat, 04 May 2024 11:02:44 GMT
Content-Length: 1163

teiegrem.cn/assets/img/website_icon.svg?4

45.249.92.89

1.9 kB

URL
teiegrem.cn/assets/img/website_icon.svg?4
IP
45.249.92.89:0
ASN
#133115 HK Kwaifong Group Limited

File type
SVG Scalable Vector Graphics image
Size
1.9 kB (1896 bytes)
Hash
02f7553e1ac3129cd1c4d0442b5a0f81
0dd8634450681fe1a2d0c1e5b02d6d0954e2772d
0019255c610cb0843c524d7995905fa5201651fcc393846bee8414f0610097f5

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/website_icon.svg?4 HTTP/1.1
Host: teiegrem.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://teiegrem.cn/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/svg+xml
Last-Modified: Sun, 06 Aug 2023 09:56:16 GMT
Accept-Ranges: bytes
ETag: "fc40e83d4cc8d91:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sat, 04 May 2024 11:02:44 GMT
Content-Length: 1896

teiegrem.cn/main.0d03c8a203bde4a6.js

45.249.92.89

186 kB

URL
teiegrem.cn/main.0d03c8a203bde4a6.js
IP
45.249.92.89:0
ASN
#133115 HK Kwaifong Group Limited

File type
JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size
186 kB (186298 bytes)
Hash
10ac97308846eeaaebd28e40cbda6090
d5710e9b7f24b9cfc82d535ccd1c44440cd5facd
0535acc43d5e8d474d4b96c2210bb2048baa3414d73ee43189603a693a1c1c30

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Telegram
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /main.0d03c8a203bde4a6.js HTTP/1.1
Host: teiegrem.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://teiegrem.cn/
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Transfer-Encoding: chunked
Content-Type: application/javascript
Content-Encoding: gzip
Last-Modified: Sun, 06 Aug 2023 09:55:56 GMT
Accept-Ranges: bytes
ETag: "0c6e8314cc8d91:0"
Vary: Accept-Encoding
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sat, 04 May 2024 11:02:41 GMT

teiegrem.cn/assets/img/twitter.png

45.249.92.89

1.3 kB

URL
teiegrem.cn/assets/img/twitter.png
IP
45.249.92.89:0
ASN
#133115 HK Kwaifong Group Limited

File type
PNG image data, 21 x 17, 8-bit/color RGBA, non-interlaced
Size
1.3 kB (1272 bytes)
Hash
1ed9bf7633f4f449c8d2df94ea0eb35f
2902ba9c2b127c74c2550298a0578d7d8da941c2
e7d23b06a4ffd600558e5443d1e32daaaf13a27cf7bb8b7cc163a92b4054aaf2

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Telegram
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /assets/img/twitter.png HTTP/1.1
Host: teiegrem.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://teiegrem.cn/assets/css/telegram.css?232
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Sun, 06 Aug 2023 09:56:15 GMT
Accept-Ranges: bytes
ETag: "edd0373d4cc8d91:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sat, 04 May 2024 11:02:44 GMT
Content-Length: 1272

aj9.telecran.cc/

0.0.0.0

0 B

URL User Request GET
aj9.telecran.cc/
IP
0.0.0.0:0
ASN
#0

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: aj9.telecran.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://teiegrem.cn/
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (15)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash