| admin.dasjgntiqf.icu/index-yErKHXCK.js |  188.114.97.1 | 200 OK | 58 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/index-yErKHXCK.js IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (63446), with no line terminators Hashf2d160b25e76bd44f49c893df90662fd b3e8219b3bb75a9403675fd7b66a7e1ed1b0418c 83d7c9598649770e95fcfd180a9956b0c241d1822bee93945677602bc6bd2695
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /index-yErKHXCK.js HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:33 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 01:43:35 GMT
etag: W/"662863c7-2047b"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2u2mg7SgwL41UepuNzQDIHhRSQrApNx0BSwBU4aM8ciluRXo7E0yyAW3%2Fvon19QhjM%2B5RSTxDz59rDiUgxpg2CPJD8wA7ECbKlICCZlbxxf3vxnTzkcdXaQfVCr4DS8pylPnDNxR8A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946b6ea830b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| kws2.web.telegram.org/apiws |  149.154.167.99 | | 0 B |
URL kws2.web.telegram.org/apiws IP149.154.167.99:0 ASN#62041 Telegram Messenger Inc
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /apiws HTTP/1.1
Host: kws2.web.telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://admin.dasjgntiqf.icu
Sec-WebSocket-Protocol: binary
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: rsvtl2/R117fiOFTRw+T+Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Server: nginx/1.18.0
Date: Thu, 02 May 2024 16:09:34 GMT
Connection: upgrade
Upgrade: websocket
Sec-WebSocket-Accept: e7vzoGEEPDb7LzsqQagO+W4Ca9M=
Sec-WebSocket-Protocol: binary
|
|
| admin.dasjgntiqf.icu/assets/img/android-chrome-192x192.png?v=jw3mK7G9Ry | 188.114.97.1 | 200 OK | 9.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/android-chrome-192x192.png?v=jw3mK7G9Ry IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced Hash87fecdadac0beb95f9b7c87b3b3236f0 822f92446c0033a32462aa21208efaef1f0d8c3c 25aa724658da8e71f5cc7c35ccbb43075866af5bed964edb09979caace667b0b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/android-chrome-192x192.png?v=jw3mK7G9Ry HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:34 GMT
content-type: image/png
content-length: 9024
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-2340"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P%2ByKtW9WMYA2Lj0PMjm%2FiRxwMZmbf%2BqAkghzVOZCX2YfUe9GSBOS8LQT1B3Q2kNPAcGln28qHHAnUQbJoFg3ZHUXG9WVfdwQiYazcSxFULi%2BCsT%2BKpbGDTnj8gIHN7l5Yvo4kdBzZw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946c3ea210b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/favicon-16x16.png?v=jw3mK7G9Ry | 188.114.97.1 | 200 OK | 1.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/favicon-16x16.png?v=jw3mK7G9Ry IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hashe3ce05eb00b3215df220efaf0fd06e21 d1533966f79dc2984c34317035f31cf3c91298c9 0d67b7e8ea46e3c959329a0e79a8c8b236187f452edc7049524245e4aa6bee21
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/favicon-16x16.png?v=jw3mK7G9Ry HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:34 GMT
content-type: image/png
content-length: 1012
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-3f4"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J03poUhFa1nKdLlHgUv0bhn2WXDmrxuHeETT1QbM%2BfnJ%2FEc0GdyEQc6RY7K572pgKIuwCwooVp50y8tLk5BI83J5ny6N4naLoHQ%2FKToafxrQ%2FU4%2BK7P36DTCJKMGdDINmQiCW9i7wA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946c3fa2d0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| venus.web.telegram.org/apiw1 | 149.154.167.99 | | 169 B |
URL venus.web.telegram.org/apiw1 IP149.154.167.99:0 ASN#62041 Telegram Messenger Inc
File typeHTML document, ASCII text, with CRLF line terminators Hashc2a982d42f89274763eef2a44fe01030 86e6d53f6478cdd0c05611093d9c55a953454af7 d8b55de3a4d5331f3b450a86bb907afe17dc964adca30f39d101a3d55a4a9d6a
POST /apiw1 HTTP/1.1
Host: venus.web.telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://admin.dasjgntiqf.icu/
Content-Length: 0
Origin: https://admin.dasjgntiqf.icu
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: nginx/1.18.0
date: Thu, 02 May 2024 16:09:35 GMT
content-type: text/html
content-length: 169
pragma: no-cache
cache-control: no-store
access-control-allow-origin: *
access-control-allow-methods: POST, OPTIONS
access-control-allow-headers: origin, content-type
access-control-max-age: 1728000
X-Firefox-Spdy: h2
|
|
| admin.dasjgntiqf.icu/replaceContent-gTK18Ufv.js | 188.114.97.1 | 200 OK | 4.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/replaceContent-gTK18Ufv.js IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typeJavaScript source, ASCII text Hash6bfcc4dcde9d0483afa365cf72752e8c 22847d9f5bb8de381a6337795a35e762c3ddbab1 96e0a8d535cf69691ca0a072c98174ced550b5fcaf12eba04cbfce8ba288378a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /replaceContent-gTK18Ufv.js HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/pageSignIn-aNCa-T-v.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:34 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 01:43:35 GMT
etag: W/"662863c7-e0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dUwfnmFj7p%2BY7OSfahw1rHtizQZzy3o2NkI9PshVk%2FHqzzbVEUwK7wuaKi2ulvu4cbHSwWb7I8T0Yr7bw%2FRisadL%2BLCzO8e6yMmlLHwBnLhS7dbVnTHaZAi0NB8IHPzu0pwPm9YDaw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946c959950b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1f7.png | 188.114.97.1 | 200 OK | 3.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1f7.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash9a3ed6635e56c144f88635e8fbdd7cc6 93108664248734dee36f853edbf31883948884ad 597abd49480cefd0e6beaf0d6f5d7821e3b2272e60b9b0ecc9eb1a00c70d8d79
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e6-1f1f7.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3237
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-ca5"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CD%2FsFz92ZKqLEZXkUBvP8uPNpUSotOO9Nl1tBeSTBMBUP2%2BMUM9qeZog4r%2Fw2Fwz73MGVwHpJIjwS4mKo%2BzoXRrjnhsCP842zloc3pxCL6ncnX%2Fto2czViG0DyfHPg%2FsK4ST08QliA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ca5ad00b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1ef.png | 188.114.97.1 | 200 OK | 2.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1ef.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash992d9e96f9a0c9867484e5403af82592 922d14cc1691f1898ea5c9482a1e9c5270c79acf d67ae070ad7d331bab1e17be0643e3072a29945ccb442d6f37330f43b269250c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e7-1f1ef.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2421
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-975"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=edSeBdPVFedpAT6Q2c0Qs3iW9EIirktxfhUapPFouGNzZtgbS5iHwusUAGSZKUCwVaPUmdxCoYPNV7cSYkJGsfOolxdkizPe4C2Ns%2Bl0hhSi%2FIscrwrfRLBIX6VKfoZ5BmSc%2BaZGkg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cacb790b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1f7.png | 188.114.97.1 | 200 OK | 3.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1f7.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashd90e015cc58de0759bb40edb6bd03eec 9b5400b9c105b6126e1416fc164ae159fa97d8ec 1dea8057fb5d952fd684cd23f748c410b478c1d8513160f3fa42faf54fa7347d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e7-1f1f7.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3829
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-ef5"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XVPp9VJkeyCl3LMrHR%2BTgvK3qMI6eAlOR29H7y%2BngyqKh1afTBvoZOgC54Ust6o4%2BSn3FtRWKSTIQbuzA52495UyUzjNWQHUuA1c%2F8JAjDMcCDJIs7JtyNVcosZKbI0qPXmJ8gYvdQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cafba50b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1f2.png | 188.114.97.1 | 200 OK | 4.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1f2.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashd08e6bdab53d1ff7929a18ff9b94e877 3f3a73a68c08f5189452cb7be921db573da1a927 c0c20cdcb8aa250e432114a197129ce830a359c9f58d06369b340310780180b1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f0-1f1f2.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4013
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-fad"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fm8cP9WAkKI84c6iyJMFHGdj4yiDuy8nFrWWEu8zHHfrm%2BGcSq2ZGHGKZX4eEneeszcUbMsZsdI8qOTcGgfXP2CT21qB%2B2ZSg1Y3Tu7MfCuWnbydlW9m1oBXMlssiyyAEnd8aMlBuw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb4c0b0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1eb.png | 188.114.97.1 | 200 OK | 2.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1eb.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashc936d63eb74745bc9fb480df7f226298 4eab73a341f61f909ed136b9d58136a4c25e43aa 631c38bb8def5e43bc0c7238e1f88fd359cee6d8ea8ac293f25912b47582f54b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e6-1f1eb.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2803
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-af3"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dy07xfeXJYPNnfAhEExF5nKEoocpJRLOIGW0r8pIt1RzLlPwzVnSyCbJyt6FssJv1uv5A0smJgdpQ6s9vtZ%2FG20l3FB8ry3SmeSeM70Pu8tNbDXvqwwFGMMG43lyQaWnO387VuRrwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ca2a760b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/wrapEmojiText-X6mP94XE.js | 188.114.97.1 | 200 OK | 55 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/wrapEmojiText-X6mP94XE.js IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
Hash3181b190ce724686cffffa87dfc336bc 704cd0917dc846e9c09a88b530459fe7e581d012 38942cdfe569b47f584bd35a91c7995c6e130f6dbc668b6129f990bea0b30a43
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /wrapEmojiText-X6mP94XE.js HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/pageSignIn-aNCa-T-v.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:34 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 01:43:35 GMT
etag: W/"662863c7-2c878"
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8oGFefZxZTqp3zUQl0F528G0tfKd6PhM9AuDiPjIwG%2BMVelARu4A6JdSkX2kvcJ7Uu9FS6vIiCg8mNrhLHZumCTmECbtvXHYPwFhGIskl9TQX2EalNZ2MIj1bZOfi5ZHxqdG9QdiRw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946c9598f0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e9-1f1ff.png | 188.114.97.1 | 200 OK | 3.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e9-1f1ff.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash188e7140e1bdb11fe54c30abcbdedc43 9de99ca3f057faee16c2301d8d643c791aa5b26f e0f8f0f8ac2f663afe9b26f9b76602dd3a077cadf8de194c990a07fb57d02378
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e9-1f1ff.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2965
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b95"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r3nuAgXe41KJ6PeArDYlspqXt6%2B8Feu1yriIsQSgRV8cmvg8oin5EKhSApzolP4rByrHkCa4IJE6BMlN85bJ8822whJgBR7ty8EYLJ2bGPp421yN4ioAt6AiYQmFHv43P62F1ewzUw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ca2a890b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1e9.png | 188.114.97.1 | 200 OK | 3.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1e9.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash694942aafb1444640da49318bdf575ef c09902599093c9482b076851da8cf60875b9f466 bdffa57230ee57ec4d2c011be6b5b577d7f26ff3489e9525b65383167e1a4b1f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e6-1f1e9.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3289
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-cd9"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qu50LwhPY6l4mI5NsHyxWUlWKCCqEq34Mv%2F7nslE5%2FbLqdlSmHBpPpO6nqTMV%2Fgy5iPQqGs6QhTFMS2LXRz0%2BB1epLrYwVaLicpmHghzJfLoYUZnY8rrxpfag9VsBEP2sTZ5d5bzmA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ca3a920b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1fa.png | 188.114.97.1 | 200 OK | 4.1 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1fa.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashb8fdb248ea8fb2fdd241676f9005f5eb ade517a127ae8fb48d340ba8102d450eb49faf59 e9da02419eb124cc5a6005ab5d439374efee0304a4418099b9979af779f0ab1a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e8-1f1fa.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4129
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-1021"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mcgHTJRNcifWDndZP90hG8ltibW9ijzNKzKaJ2Qg%2BJFQn%2FO8yLN78byYS7nWp8fA6hnuyFFBsj73je0KHaiyd41yUb51xh8W%2F3HqAz%2BB7HdFUXDprZnFk09asLAPd6ntQsZt9PVpvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb8c4b0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1f4.png | 188.114.97.1 | 200 OK | 2.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1f4.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash81ad46682700721224b1d604d7aa172f 40d1f5a5c57c11382c969481e040fde8c103d30f b3ab35e8edb51bb41624b58c8b13eb39d6a94d26963e07b5a6b9bcc39afc95f7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e6-1f1f4.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2941
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b7d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hi6hbuqyGVMCRGGYiOOBHWPhWd%2FpXLx5M1tBsn5i8trlG5apF4l%2FR7xiJ8ccDfsxjEdm841Uq0b1FOFujaZKquCRAXqgAy4M9P9hXemKxDxWOLPK6aZtMcLTiux2kZ7KWOaRCx8X%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ca4ab60b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1ee.png | 188.114.97.1 | 200 OK | 4.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1ee.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashf4ab04a70ab8f84ade1d0b60f6caf9cf e3ac4fc3eccb1a5df7739b91241b9c6331c9c2bb 9c57577d0cbab2397450d169e23779feec66fadf68569c7534596cd8629d7be2
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e6-1f1ee.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4181
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-1055"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FpljMbFKNLb1f5cpWdZMoJ2n7%2BSm48WbV%2BldZnYj51wx%2F%2FfPjQnugVeRsVDh7pnGN6VtR%2FrQd5UBw6rOjywTSYl4lzIksIUrhVnXNgc5ObHr2JSMAvtiTHOLn58mWgNmCszq1PF2OQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ca4abe0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/replaceContent-gTK18Ufv.js | 188.114.97.1 | 200 OK | 6.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/replaceContent-gTK18Ufv.js IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typeJavaScript source, ASCII text Hash6bfcc4dcde9d0483afa365cf72752e8c 22847d9f5bb8de381a6337795a35e762c3ddbab1 96e0a8d535cf69691ca0a072c98174ced550b5fcaf12eba04cbfce8ba288378a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /replaceContent-gTK18Ufv.js HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://admin.dasjgntiqf.icu/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:34 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 01:43:35 GMT
etag: W/"662863c7-e0"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BC5pR%2FGjwLAGrXnRf%2BZ2q2Y%2Ba4L%2BFYz0BJhVlKaEIWaNEX3yDrLVsPVoxXGGZ8ru%2FFqzU3YM60a6VUHA1o0HtyZ9hzGEPAGDk5ulqFswrDA2pLJvDDVTElGiX%2B0nYQtoqDHsZTyMYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946c66d970b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/scrollable-6k0I0yCh.js | 188.114.97.1 | 200 OK | 4.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/scrollable-6k0I0yCh.js IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typeJava source, ASCII text, with very long lines (6971) Hash9c69bdd4b6df084ebfe63bf746e1499b 2c8e544f83644b82c6471191fab6570962cc8311 db371018e9c041c3e2085f1b15b582f748c98c74f00c065c9f9e5a4c48b1e07d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /scrollable-6k0I0yCh.js HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://admin.dasjgntiqf.icu/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:34 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 01:43:35 GMT
etag: W/"662863c7-1b6c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kf5HcsfTEMoETl2airr5OU0cPZRW8QpI8VG2z7TwHiJNTX4HLlOOoumMZhggkXZM6NV%2FA2pdugkQouYN2I%2ByBwdn%2BOl%2FjzBeCWhzR4Our8ZF0qWIzTX50qca9KVW2QWBkLqB2%2BM3rg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946c67db20b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e9-1f1f4.png | 188.114.97.1 | 200 OK | 3.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e9-1f1f4.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash5ee3305da45522223b266ee7126a3b75 b01d0c5570dca3604868a581f577391a35495430 510bafa823d87b940ab361b8f66fb4abb6229351bd333a6efc1d14965e520dd3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e9-1f1f4.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3453
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-d7d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TtvQShr9IfLd0ApQogAw%2FO4BISLry1FT67vI2Uj5b1A3yDrl9QiLH8%2FFFp6OsOqdUcuoxVPznqBjJjs9qQRxbS1%2Bk0F89xhPwhMvIemPR9OBYlFzss88KJhA%2BjYrKA79RwrRFx3i8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cbbc8c0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1f2.png | 188.114.97.1 | 200 OK | 2.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1f2.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash67b11bb2ec80ee24fda87aacce21ee43 89f091c27d7888def7c937e23c7de661f41c038c ca66c37c73bfb3b067b953c4537a3571f2312077d049914b8e5489128d0be1be
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e6-1f1f2.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2937
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b79"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9kdo5o9bZw3eLWg%2B288KK43JYEhrt2wDNgxQ1IS9brNB6OxFIGm9O1L1PfWdtEd5xLIHQMCR%2Fyeb71IczVCT1RRn0Ex2hFpMSV5GKoc0mNRh0a%2F5JTL7%2BN77m7qB3zagt2NXAhHdIw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ca6adc0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ea-1f1ec.png | 188.114.97.1 | 200 OK | 2.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ea-1f1ec.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash47727a5b96906c506e39e9efeccad7c6 cd63d7e67740a4d10ef04aaad1cc1e33dd8e0f3a 8bef17ea3b8989fb62bfd1446febcf4ff09c0b63c7966f940e98f4b56c3e803b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ea-1f1ec.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2791
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-ae7"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mN0MX8tSJ0HGIRKLvjZkU3cqq%2BaOGbo9u11Vkau%2FeSXAtLCLcsaPt%2FY7SirMyluc2TAgrycZ3FPFFYvoRyRa8blB%2B7vlONiPwYJ%2BhvQ4jF%2BAiNTLHa2Ur1C3Poc0vH72i76SEAIaxg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cbbca30b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/textToSvgURL-Z4O-nL1S.js | 188.114.97.1 | 200 OK | 3.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/textToSvgURL-Z4O-nL1S.js IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typeASCII text, with very long lines (306) Hashcca1508d96dbfce74dcbaed756d04955 c539ff84caf27c4b22e498662644c07e6893c19a 36cb02e59322028c02c5365bd56cbd129b3eb2fb4aaec625160ca2dc9786a4bd
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /textToSvgURL-Z4O-nL1S.js HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://admin.dasjgntiqf.icu/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:34 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 01:43:35 GMT
etag: W/"662863c7-165"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M%2BKjhdeQ9SKPX9GfqE%2FNhzVLHZd7kJOSLcAitgwmdsTDU%2BU2FupiJDb%2F%2FZC6psc6QLA3JtgNQokroiq0Dkg1BbKUVt4tItoY2aiOwuWO2kA7fLXW1YM%2B7PpvwMA4GHVaRjFMnRe5ww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946c68dc10b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/pageSignIn-aNCa-T-v.js | 188.114.97.1 | 200 OK | 5.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/pageSignIn-aNCa-T-v.js IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typeJava source, ASCII text, with very long lines (3919) Hash254808b97215a9d55f15979389c86eee 26a3ee1e6ee6b71bb9de075566be58753b25cfc8 87c4cd87dcdf01f0a08da936de65a258c7575eb647ec3714f121d0fbf3736268
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /pageSignIn-aNCa-T-v.js HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/index-yErKHXCK.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:34 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 01:43:35 GMT
etag: W/"662863c7-11d5"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pnNPonwsdyM6KBrEKVXpAThz7Jp5rF9TCmjIle1n1yrTZxZC34sITiDkCokf%2BsvxyZC%2F6%2FJk8d23wiGPtDRP2Xam3RwDzNHopWpSjzYgkwMEK9wuK6tm4mq41LH89%2Fj6QKBj3BdV%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946c68dcb0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1fa.png | 188.114.97.1 | 200 OK | 4.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1fa.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash03c3a4b4e37ca6e7c48310c084622393 0e5b66376d85e4fe63feadf569e9afbee3d852fa 42138a2a945cfeec474d85c73e9d535a7a0bf1c09524b2b059385e9cb664849b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e6-1f1fa.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4504
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-1198"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lQj%2BvKYbxRdEaAAksQQZqpMSmnvgVVrMeEtjgiGMSSFTZ7Q1MKQpHQT4CO0Fg48v3EwavkXi6IT7JfrYepJpNWMQdjP7y%2B4iBuoSYtiRFqQ46ZhAytVXVJ59elFi56V4P95xDK7EeQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ca7aee0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1ff.png | 188.114.97.1 | 200 OK | 3.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1ff.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash5983787851a0dfd972e9a24a98c89bb3 d5cc5ab1752b158cf421a1edc7d3b0165c3b268c 2c700c44fde7dd8b7fe6f92a4d6cd8ee56ce383c04ffac1346e5620dd75074c4
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e6-1f1ff.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3464
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-d88"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AtRiYCHe01nbGTcNhkYPX%2FT2G3OA%2F%2FCAa1sCIxfcektmGb5j87r%2FMakCA2r2%2FjrvUqWLS6ff9Q370HVAdtJI2GmJ7%2F35oPOb2k4JzTFbUti%2B9RsUrm2Vo6ggz31%2FLEbDgK3%2BAoF9CA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ca7af90b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1f8.png | 188.114.97.1 | 200 OK | 3.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1f8.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash21d61961faf51d8e8a7ed430154a4bfa 97c3f36d2f81f6e3284600ceac16d06d8a239b48 d530e5e457e34f092ee63268a69b6c58ebbbb5224df6e3d90cf50e1f681899a6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e7-1f1f8.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3175
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-c67"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ssE%2BKubkjRQojbjY7Ce6SpyNTVLqGPMH6mwsyJ51VwKvrIlWdj7zA4WtWVIFd920e91P%2Fc%2BkhSw4bFYQyc080HQ6YmToSkn2EAhfp8RrwgQe92SwYiGjZn3yTZ3gVqA2i6MQkMmbuA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ca8b060b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1ed.png | 188.114.97.1 | 200 OK | 2.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1ed.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash42e06c37f13a3faae190798d483a441e ca534a1e22a70eaaa9c14740a2d0e27ef36d5a8b f0f62d21f290b03131672b67171d91b135d7c7952237209035801c1b28e30210
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e7-1f1ed.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2641
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-a51"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WDw%2Fob24z0w9Hw8xHs%2BmasypuUqeyeeYSa%2F7yJVKi0SaladCZS5vx06f7KCjgf3QCYbTU%2BKTIDDemflU1awaw3qlp0ElUiCN052fLeBeAhnwnU8icH%2FS%2B0D7zrXmmsOxITsxHuuQ3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ca8b0e0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/crypto.worker-T8uEdtAd.js | 188.114.97.1 | 200 OK | 27 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/crypto.worker-T8uEdtAd.js IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash06026fa41e11ac29cae837d4171e000f 08d9171d8cf75e349d06fb3ca03bf80be68268de 19fb2e2b1a73081d0be43d40c28e85d6875138f1f0b89c8a1837c3e806d578b3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /crypto.worker-T8uEdtAd.js HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://admin.dasjgntiqf.icu/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:33 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 01:43:34 GMT
etag: W/"662863c6-10d02"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sBRQeuLtM8OZ1T4ZGG6ybLKydU3bNavt%2FA4MknrO1GhQqLfGk2QUxM9BOaqnvkTl026wTiM%2BsP%2F6SYPv4QQoDlFo%2FyTyNXQ8cAgC%2FhKNWHcuFn0KWMpDfFrquT2aMprFMkbc25G62w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946becbcb0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1e7.png | 188.114.97.1 | 200 OK | 2.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1e7.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashee5092b2a1f2c39d3b144e56e5512903 b33530da3765517c97169e4b8a71acb83157a878 f2e1ea547d2ebbb356cc9f53c46604c30d27c7e4841a425dd68bab1c41029c6a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e7-1f1e7.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2792
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-ae8"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F0JFlhe8KsPrb%2FSZp0jm3IJvjjJ2bObXWocEZC9aJn8snnRiaTPvZ%2FeTnam1V%2BpVUFgPxef4sToJfnmb28l9bpBHiqjM%2B3pD8EmmPZmz%2FMYjkwv6%2Frav9L1ZxN4Qq%2Bct3jiCSa8j3A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ca9b240b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1fe.png | 188.114.97.1 | 200 OK | 2.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1fe.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashdaa2e7081a8d5714ba157063d784dfb4 6e51310f9784e0f9fcf47bad833c358ac9df92ac c4b750364aef14fdd99635f973fd4d5712799ac2a422b90d399347ae3b89771b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e7-1f1fe.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2890
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b4a"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8UspkvQIszOOZWiReCK81GK3VtkJWLFmbs8bJbX5Bm1oNirwRLqsqyLTaoejKvSjLVb5tgFHSogHaSjYaNeXKhpYK70QFulDUM7NOD1EYy7lrfbDRJdCuDR4ccYwQ6Bb3%2Fq%2FnVZjrg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946caab300b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1ea.png | 188.114.97.1 | 200 OK | 2.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1ea.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashfbb54e961af78936a0750a546300806f f978c133fbb0ddaede7caa07f86e010a5db8ccba 4f7175583c297abd53b01ca105d86ee9c18ae7b1834851989b24b509d60e5d3b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e7-1f1ea.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 1991
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-7c7"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cbzw2rBleNk8sCA8pw173UabJpI5fVgI46AyDXoRx8DURaf9wulPBrkshMLI4LweruNPcRJmul7fwVjs5zR9SB3vbP%2FGlvPnjnp2GfJA1H%2FBrEL2bPy4ksWBuQmBLwqPQtYf%2Bn1Nxw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cabb500b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1ff.png | 188.114.97.1 | 200 OK | 4.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1ff.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash1a8d3213bd2ce913b803e6b1b84377a4 f6147f349c23f591ff39c235cc291fa60a528a48 e2cdaa67e5734544d84ca24993034452308a78a87160ce56e38167b4961f147d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e7-1f1ff.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4541
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-11bd"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IVBbX%2FxfG%2F64AfJznqkygD3AM2YIkNtRYPdTubdGfAZabb7lLZcu1eQuZeshyAx0KMfaSTv0Bg3VBVdQy9NpkKFf0i5JbyLR1TYik2P%2B8weUlW2NJg25W7rYANvYxVGKr7XC%2FxXFVg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cabb560b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1f6.png | 188.114.97.1 | 200 OK | 3.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1f6.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash27abb50f4c5533eb52e4d6df656cf020 d5888a4bb78ab795197aec7eeea5d7deb871d0ad fb40c604958a141df7244ecd06ce56e90fd9d609fb90d61fd0fbcbaf53888bed
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e7-1f1f6.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3345
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-d11"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z4Hd7Xb5NHZCbkmHriyBhCiDL6oTC7sNdmH9z2H15D47Tj2euNUkFtfBcquuerimgcR4L0bq%2BfbN75RRTk1nxXX1KBMQSMaheYCpZ1v0o03bIN1VxVah%2FyGBsZYYoghH%2BLts8DF0iQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cadb850b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/mtproto.worker-5HQqcpJD.js | 188.114.97.1 | | 242 kB |
URL admin.dasjgntiqf.icu/mtproto.worker-5HQqcpJD.js IP188.114.97.1:0
CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
Size242 kB (241782 bytes) Hash52dbde47a8399abb2d6de6e634407866 8b1299df6cc50445c44be958dfbe0d702ee70ded 54976ab3bc4b0aa3978aaeac7af2f472c2159351fc06f6a5fb571f80ee818667
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /mtproto.worker-5HQqcpJD.js HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: sharedworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:33 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 01:43:35 GMT
etag: W/"662863c7-eaeb7"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bO53NeFIuHtQWHf6IWoKMDBLf5dXhJn7f04q2lYe7DoyRcixdSSK4FcXWeq65ofMeecRwtxwv4kODn9JKjrQTwosLpSMnbfh7Typht4PPOvW0nK9K7U5jvsmRX6l11du3nGnBkIr9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946bf1c120b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1e6.png | 188.114.97.1 | 200 OK | 3.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1e6.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashf573e684490da7d5eb32411e30a2ec75 62cc3f2e8ab4835ef5d3baa7a8ef6a8614cb43a2 e337171571b57fb65b25d93ee24a38bac1a33b0f3fb1c2c73b6cb085637d353c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e7-1f1e6.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3239
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-ca7"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z%2FPm3T8k8Pu%2FAr2KqqCn9OjuT1HieJkZdRQHt0pL61ByHhdgeFgzcocYt7b%2B4los6GH2PqVFGBFtprVcWUHnwTYODfwIWKg4cld47U%2FjaRkbw%2FUe6%2BDJ%2FNkvCFD2xv7np%2FvvZleUEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cadb8d0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1f4.png | 188.114.97.1 | 200 OK | 3.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1f4.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash8e87590775b34e2c5fb5b2f3c18a4c68 2882a25e81bcbe087b20912c1bb326d6cb1318d3 d126475e0cbe9b5c92514de449bef0738430ae2db567c35a33d0356eef1c7a60
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e7-1f1f4.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3289
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-cd9"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3wnCMyGVG55WT1qdG3XVVxnFKEmQoD94alyNW8YLW9Rcq3dUvflI5Kad4MOY%2F%2FPZmGWX%2Bmuaa2sdfmAzcDB9mhTN6bVHoe5PUXsdgXt7NxhGGh2qLGwu4Bmf%2FTMh5YYzk7x1bFyOtw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cacb820b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/lang-kW-CP2Y3.js | 188.114.97.1 | 200 OK | 38 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/lang-kW-CP2Y3.js IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typeUnicode text, UTF-8 text, with very long lines (14604) Hash64cd60d1bc5cf6178ed44e70733a664e d207cf811159682b52a0de066d3e2d306728fd00 d25e7fc44515d79a932c0ad78dbdbaaed7872038d189b9e6502bc8692de74bb6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /lang-kW-CP2Y3.js HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/index-yErKHXCK.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:34 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 01:43:35 GMT
etag: W/"662863c7-1cab8"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mEh8b8o1ntAkk%2F3NLUhS1X4oEP5tSbO4p1ijHoAMmgNqqkCC5yiXxGDmXPABs5cswKrJJO%2FT9jDC7GPgA3Y6HonJfnMavMNcr8Ih5qQqv1hpE5UeZ0pnNajpAGb0pNqUaNLmbaIHEg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946bf2c2b0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1fc.png | 188.114.97.1 | 200 OK | 3.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1fc.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashb1fa54221359f90d1c301cd3e34e7eb9 a297766192fd4c1a05758735d556852b4b038fa2 417577b750a63612cdabb9b0e8f36c6d77ff3f510eb00459bf1c636c738a1bee
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e7-1f1fc.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3541
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-dd5"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=77qj6%2Bs4xwdGHrssTt%2FHmQAQm%2B7UPYlrMsR1gjZaZpXlizjBjVpQmiAtxOvInCiMWsu9hD6QGBHYffy8ID81hvhyApinD019VoQvAvsQcM5NLJ9%2F2pk0kMBn%2F8Gn0YjsdHfr8Ksd1w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946caeb990b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1f7.png | 188.114.97.1 | 200 OK | 4.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1f7.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash3f0e31cd23d1335091c0e1c576c4fd01 0bc376e05b1f490c59fbc0fac8bb0bca1737f10b 77b64b3e285d4df04847670ad5c3a56c67cadee2187577aefc2346ade65fc5d1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ec-1f1f7.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4374
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-1116"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c2MHxNNGfZ2I8JBVd0EUXRc6H1rgbO8CPR2T7yEhbi1SMJnJZ4RiiskxAw%2FHQADPKv4Yk3atrDR5sJswMS96gA7egifEvLIZJAPCmwWbapUXlkZov28ZT%2BEgDNA2oAIVkjBzOCcp6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc3d300b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1fb-1f1ec.png | 188.114.97.1 | 200 OK | 4.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1fb-1f1ec.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashc8505e97fa41d5f23c75dba52a3997e8 845fe78be95c6f1ed1f693a95e7823a8bae32390 4423aca1e1f40cc554ec3ed98387f80d686bc38ced80d4be3a9efcf085c14ffc
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1fb-1f1ec.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4235
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-108b"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9x7wPwaxQl0gdb0xfblxbX0Fp%2FhIRb0PCFB6jmoTraaCkp8%2BaFXgLOTrnGlJk8YfiuklnBrMu3YannCfFWq0OI8hZVDcVn7xNQEH6cHguh27p7hEIthsXUYlU8mLFm7pMfWqWY9R6g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cafba60b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1ec.png | 188.114.97.1 | 200 OK | 2.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1ec.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashb3eea6ed129156e6c0b9b47c1424e5c3 ad8975f710e9eaa0b5ae31e57bdca85181b2a5db 688bdd07faf7b6e803cc9bdf3a0faf68b9328509bdd7e7b3d5c22fd50812d64d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e7-1f1ec.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2717
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-a9d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j5y9xcl0o49OcdNhwhQFFKsICWEqBr0ng%2F8okTALX%2BZoLhtzjQtMia1UyKCJhzB5UWpyFcg34Eei1Wvs%2B5vsYNziFHlBjnMn%2B09u9GU4HCb82yQjxRaP43s4ThM4frX4ea3Kwvam4A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cafbac0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1f3.png | 188.114.97.1 | 200 OK | 4.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1f3.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashfefb90a713345264dbe654c80f61dafe ec341969ab1e737e786a091d40ee51acd7a52248 1ab4c94de84c16f1bf0bd308c2f45d9ae24aed4e3d33c1fc2105a83f98eedfe7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e7-1f1f3.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4491
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-118b"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JMkk%2BDLeh5w4aSdKBy79aZxIFTpK7AR0dRiXkavW0RbiDhTx4gGnbme6TFwbhMvIxke657TkykykT3TSrNHFQIkJ7qg6vobbtJu14w9u2m4EesMxUudTdi8Y0d8IIakHNdGBUO9i0A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cafba90b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1eb.png | 188.114.97.1 | 200 OK | 2.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1eb.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashcad874f2adcd378d9546d0ce1b11ad09 ebc6ef763606e867a3e734dac6a730de3d37fe03 2f2988812c32482b9fb18b2b96ad0cc299f75f9a7a1758b6e6393311ed8ce54d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e7-1f1eb.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2845
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b1d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sjnr2pyjwzeu%2FWbkPWwGyxaLVWvqNndwLWrcg8IiunFloq1LhCZXxa7kp8f8FfAQ2gv%2F0Hl2V4ZnpnlCcO9QBit6Jge%2FdGyWedwl7mJivMtmING7PO0VJo291yTDVn4kcvcth5yBWQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb0bb60b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1ee.png | 188.114.97.1 | 200 OK | 4.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1ee.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashad75cf377c8d264db6e3f15c247b0c7e 6a8605b6133bf920c811104c972c447a90bfed63 1c3fbea07b11fd0c9455e48ca715b0fa74d66ca66a7999f440e89edcb21313e4
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e7-1f1ee.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4173
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-104d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QWQANnGwWqUIYMZr6jp%2FnNOO8HPrtBJGCguy5Gn3C1Mo7aqbOVggCrAHtwZc9mHN8WMsHfNrDhYKbklw0DZ2MJeVjmcuiSLBkiKZJsfNo3%2FrcrVuD7%2BQ6S1NU%2Bd%2FS%2BxrU3Ib8%2BVPBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb0bbc0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1f3.png | 188.114.97.1 | 200 OK | 2.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1f3.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash9ca8a7cdcfd87148f27494a9dc7211fa de5b3de1938222a2d46a93d6325070d3e1129bfb 695bc3fc5cd70ece81f0f738c41baa4b4ff5a1619ad36d20a516f3b721cfcb5b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ec-1f1f3.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2218
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-8aa"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lj3mW%2F1MGaqc11qUEVnudj8lKbeUDkmEvRdPXAu6UogYjoTC9JWCCLP49w5FrnGKkMtpCrZ3BReWKygUc%2FuIbZ6l9K99ofosVIKXUvoBLqvIPzObFB24J%2FIj4%2F%2FfAXBeWfeMNxDZbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc5d620b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1ed.png | 188.114.97.1 | 200 OK | 3.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1ed.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash447db8958f516ce26199724f7a15faf0 af249d100d86d391077290ea7f1e0148215705c8 c1637c023f598dff07fcfd84efb1efd8cd3ba4b7d67d8f5b910ea8bda073a5ab
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f0-1f1ed.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3598
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-e0e"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d%2F3q0TaUcn1tIG12LLVP3Lro8PboKA4%2FO17UDWdAqE70M0Qiz4H2PM%2FFkpBqOYkWhJhVg%2FreEtrs03YZWh5kNrRUdmQsUj0tHEKfRB5cypTT98x3N6Byctnv6he8K3%2FotTTMqUfIEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb0bc30b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1f2.png | 188.114.97.1 | 200 OK | 2.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1f2.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash98b53ccc0cd8529fb80e84ecaec4a3c1 c485c59ce18ac5fbb5c353240ba0ba50d28c5e87 d58c6335f4260c420eacb9c9335d2a9ccd4f5f8b69bc8d54abe02fb4c33a3846
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e8-1f1f2.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2421
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-975"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=52ELqWmf8T7xh%2FZvPsRQO49N%2BK3%2BR8JHaBnKZPGTPufnfMjyZEpvGOPA%2BHj9S3jImsmxeiHO5uX4qEUI%2BNYpULSkezzUubihDjmQjIWoLLaacPlBtQ3Qb7SJLUMlzA6gS8nhYOWrng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb1bc60b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1e6.png | 188.114.97.1 | 200 OK | 2.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1e6.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash891ce73a826a465cf24bcef26d02eaab 33f8d2dedeb4e0deb043d2eafb2320840cc7c907 faf56dd162bbcb97ab2b2c47275ef24c3ad183cd04c4982aeef0c70b4e4907da
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e8-1f1e6.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2601
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-a29"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mGg459eUJuAsrh0ebeXker8qeJ977fxd7%2Bt9VM81hXX36vtfLuc9HZtQ4R07pVjTWi65x%2FT0o9DH9BrghCmPJJhScyiWwgKF5QAJEkTLiTi43rxPiraTn%2F6qYAniDM%2B8PFhWRK317A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb1bca0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1fb.png | 188.114.97.1 | 200 OK | 4.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1fb.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashd3ddf6b72128c52191a111212204e19f b8b4766ef4f230b606615a5b59bd84f94e2fb87d 60c5c3cac2ffde073b3b9d8842b45ba2f606d13aba2c411b682cb3ab9d3aadc4
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e8-1f1fb.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4157
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-103d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PTo42SFj8WSFVImqgsIktfGzHTLuopJqtPXBUlbNC17OeThVU8OWAv%2BUlJT7pmf3yFZsSdOeqqwR2MaxqpmPZ7r5uiojGxeuLaR42onivMBl25k%2B2URsLSWsjOrR3ayaUC9Ihp4%2BLA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb1bd70b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1fe.png | 188.114.97.1 | 200 OK | 4.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1fe.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashd11801883b96b5ce5eddb8a2d5b67097 65647237fb56eb78e331aac06ca0996b4a1a294e c41b6e2c255872418a68991fb7b90df078b4d03ad4d369a693f2d05bf30ba20c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f0-1f1fe.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4291
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-10c3"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=alHmoyzgt5glLeUpNMOf8bHqxWtnIiERqXJmFOb%2Fb3%2F46S8Tjt6fRJM2hV54nf6bCZatOYXQ8%2Fxq9mODt1ClVuErNfDcZ72yC%2Bf22n1HlnkaDYLktH1%2Bf8Xo391t%2BjhSAGEA485Ryw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb1bdc0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1f1.png | 188.114.97.1 | 200 OK | 2.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1f1.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash0e0e60b788304d7360090dc4ba82ace8 b1f6f27bf5682b8db138e61185726809afcd33b9 fcc3e3ff2d4d7fb01b815765c4581eb575b3002fa07bc5c3bea409296c9b9246
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e8-1f1f1.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2745
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-ab9"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wv7G55wvJY%2FUWMYOq6J6ZS5GYxSug9WMlR%2BT8e6dxyqUNwJudoyWgSq2KcK7qao9KVgRP%2BoGDn7Dx%2BS0yGZpPFxX6O5tzXoGsM2cdc4ttxoH9CP908aBvS0vcmA4CFuxYX0fMclPoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb2be90b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1eb.png | 188.114.97.1 | 200 OK | 3.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1eb.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hasha6377f99d10d9667bb1d7d855adc08b2 91480a1f903637b2c2aaf1aaef4c35acbc117517 8244d9e955552582feb80ab3af8734d4b6b79b5480db2855b6e61f1ff1f91235
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e8-1f1eb.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3620
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-e24"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n%2B%2FcWqPEpSSDlO8GXOR6JAGGrlQeby77xLEzaeib8cqL6q%2BYDztrMnRbhXZy6ZOZunPeJt%2FUhtuVS98rtne9adhr7nS7tePMGXSQolHxkx9C04T8R3I8hpQJOMysONWBBpWNFF387A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb2be40b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1f3.png | 188.114.97.1 | 200 OK | 2.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1f3.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash190eb05b8eec7b672f5a7b3284570b16 b9062b4b25437a4be5495f6a6842b20bb557614b cf50250fd212291f8f672eb7cd3635e7839ef71d2de7f5ca57237be64f21e311
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e8-1f1f3.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2544
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-9f0"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bRJe6rOxt9lheMqEivzvgGReOgIGOa%2BSko9gRzwH8LzWewfnMN2iCTVRRekXtkia1hCPo0UlR3W94X5Fg0jznum1w%2F%2F8IBmNabTCJ7AVf%2FNV8k0r4hkU%2FPwBuokNpgsV7ppfE816IA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb3bee0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1e9.png | 188.114.97.1 | 200 OK | 2.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1e9.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash5ead452199e5970e3a24ab81cf658203 d44028f190a2f4b0498fbc6bd48d4e90e4216a3c efbb478b5726bf96c83d0c7077301fd8acbe4bb909860465c890645861289da6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f9-1f1e9.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2174
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-87e"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iwVMg0U6jDgA4zg5GMwbTUBo1YUZCBEerJ7UO7MEMaJFcaP%2BeJwwxJb9tANyhGfPtPaPhpCS4iuPqVaUkByZpWkoAir4ZcjIfw4kr2F10KIg%2Ftw7k6ZChfSBS6r6hbl0woT9NsXPQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb2be60b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1f4.png | 188.114.97.1 | 200 OK | 3.1 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1f4.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash754a852065f15a20f016f68d3286759e 3015753ca92b1362c1e454236ef815bd28c1aa22 bfc41b7a82ed8618148edb361e9551cd94e5cc236ead05c70021360bc47eed0c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e8-1f1f4.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3073
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-c01"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KKR%2Bqe8SIKcgY6CmnWdWkpNeaIHvkUpWf6KB5D9AiI5%2FVggx77wac7J%2BqZGG3QkKzqdZdKS7bEqCsqNTsEtIacWVipHnb2%2BSjktsE1LIDk7ZjHZPRxguU0GIKwPSys3oLm5biX0mog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb4c050b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ee-1f1f1.png | 188.114.97.1 | 200 OK | 3.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ee-1f1f1.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash5d33e1836353839df63c5c9a0781de74 97b523dc307734a8364729264b8a58e70f9a92bd 9865d412105b605ad52eb54116c42a2a005a4d2eb300ff84e3acf04ef25ea596
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ee-1f1f1.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3857
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-f11"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JAPfIvIRCKMYmyQikwrKyZ9iYE7EUfvNQuinPzqUaZFnkFzN7NzJDOWZrTGQkcmPZAHDjuYIga7KYZnKtY9hKjVCy%2FJUnaUYUoF3K9IVTFvFZiUl3UI%2BsMLzSlDU8sKStFM%2FdTtEqQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc9db50b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1e9.png | 188.114.97.1 | 200 OK | 4.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1e9.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashc83fe8167b18de227f252ad9934cbada 9865306ae45ff3883cc23423ae0015dac36ca271 4d483f58cc97b78f45bd283b02ac1e1db3ef69305f8005adfcefaee84e8e4439
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e8-1f1e9.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4169
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-1049"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v7d3AcOdJ6tGwmoYT8R%2Ffx8XywLgFhAe5rXsB3FfOwCpLCCUnWFBHPjopxyzmgOS7Ks1LGJE%2FQoLECqTr5g4ZcuvHjfsdGQJeDnMkZMlwgtYT0kWIniVCsrJ3zk7NRQjkIRbSh5O5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb5c1a0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1ec.png | 188.114.97.1 | 200 OK | 2.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1ec.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashfe26f6c3829626e314b7a0f115e96694 119c83fafb5aeb5ef7c3ecfbf0b1a1e57c9547f6 20329ed11a733149983ec6c21f1f18fc70904e095f5d33330577851cc34a0c48
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e8-1f1ec.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2868
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b34"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xf2nyealgIox73d%2BrzkYRlFBniG82QREugcl9EJaVbpILTgniwPAtfTCddhXz2QSQRVSCiF%2B7wckoLLM1yjR4aFywvJv9x%2BeevMSbNZT%2FQqFpy2pB3l03Rs2mDuYrwH048GO%2FnOpdA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb5c250b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1f0.png | 188.114.97.1 | 200 OK | 4.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1f0.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash576f5ed3937ffb5f29f07797dafd8bd4 7dc484a7694a75138cc8925f7bcdebee2e71f903 70027133ab1b9442c8d4913753f14b72e6c3fbbf5a54928cab1d9857a0232a23
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e8-1f1f0.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4401
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-1131"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WeOxw9l%2Fweke7iQbcOsYU5e4YBmYO47ECVhZykIXtpwflhXtv2OJpkJY71vWvY73UnqJ9V%2BrOsaiXKBby0IHzKSQ4MULr6A%2BOZT%2FavGWkGHM7PmLpUJyzc1xn0tpeV1L0BKsqvRO7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb7c3c0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1f7.png | 188.114.97.1 | 200 OK | 3.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1f7.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash22a2d23486c7545b396fb4b3a8b6f89e 707f3f3632519dc7be5c6f7dacbcb97cdcc5338c fb41358a100f3ab70e30d5a0cd95de40ef3f5bd9e76835319da07c053830c2e2
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e8-1f1f7.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3734
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-e96"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vc1bsOqvKSJIzoC44pdGvmbtiG2cWXZidtSYPxVef3Oy2NnLdgKOMt3uNolm%2BPtJdmEWCtsUh0CAMJdQyTXdlXilvP05UL3WMBgba30C3hH4Z%2BhVx3NAEH5HNmz5PuoCqxzHdai1ow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb7c3d0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1ee.png | 188.114.97.1 | 200 OK | 2.1 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1ee.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash1cb9a07edd553804f8de4f8c414a4cd6 06b2e60a4d759834ad5e22f53343500a01c2300e 3489323ed4a63258f21ebe3ba790cc5a2b5a2260d96c46332d31e29776506302
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e8-1f1ee.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2127
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-84f"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6czvowKRdhWUxFVv%2BGEjfkoup12hhEFbacYIO%2BaY1fp1COtq4YRo5s04Y%2BOwZ1fdLEoWkhknS3JrGgGeaNVIMq7fAN0xT0PTeTWvtpgKJ4zS75%2Fz%2FWnS3KAtp7JzMf7TBwlkFwFpYg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb7c420b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ed-1f1f7.png | 188.114.97.1 | 200 OK | 3.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ed-1f1f7.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash413ee736d12a37637e9f6d286d4d2481 2af3e24a66010f0029596610789431ce4909b33f 61183c4bf2d2f7fb6c71e703300bf6f397e3b26f7b336ed56ec5b47a8889a48d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ed-1f1f7.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3891
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-f33"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E1zqGPhp9ozJ07zZsQCbcfixaKK3053FxrR2SfPlrcEbNPbffohHsPHW9MvO2rjTjrBfsFCbEWRBBSJAVE9Vf8YHUweh%2F8EUGNJdsjrNyv5k91LY1JG49xOkwHqzrJzEFRg5OcA%2BSA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb8c470b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1fc.png | 188.114.97.1 | 200 OK | 3.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1fc.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash4d43906793cd83cc584d8b12ad63eeca 020ed2085edb6c034011eb6090c160f278b8be60 ba75bea14664909c8d4746f8189118fc086b955cdad323638671489ac91e2855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e8-1f1fc.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3381
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-d35"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e6RaQsBET7hmDhSuE9tEhuqBvuUfMqzRCrGXMEIYm57nZl2hZPO0gs0m8jGq0rNlsk5zu0kxyayG95AjpUn0%2F4wRenH883YPBq5OXHzbuBh45n7squ0cwayuMU0GSMBynizFhEygzA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb8c4d0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1fe.png | 188.114.97.1 | 200 OK | 2.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1fe.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashb4cb0c050bebdeb2848c2d989d233fea 5ce3b58eaa87d5492236154f1ea6cfe8daf34e3e 137bcb234d02d1a047f567bf4554aad83a43004c53f521d7e47e0d54a4d192b3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e8-1f1fe.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2534
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-9e6"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7fO%2Fmvzjfuqgqc%2B%2FZuGo3awLAf%2BWZqJ9bRk8NMgTjiK4bWA7p2cjly%2BGhSSn2lWifkq7aEfweMvvSBn9xEl2oqflMG37FOVkkDB9Vd%2BZ2WRs%2FAm%2FAMXrChAE%2Fh2qXCvUfrd0n3fZBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb8c540b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1ff.png | 188.114.97.1 | 200 OK | 2.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1ff.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashb58bc2e515621a96eacc73b562cab834 a6dfdebf74d8be603db79d6d30ce00fbdadf54a3 f4570fac2be32b178def2102373fb1150202c421ac42b86f473e073468d3af1d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e8-1f1ff.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2702
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-a8e"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uV9Q4eu2zswLg%2BQoMKaj9J5IrdvmyYlYeM8FKEyScjWSDFnXc45vyn5DFlfbK96BtsCDQFBlJTRMnZGeJ18pgfxbdLoTTuCgTYKAzVkSGC62fkzULgl7YKjEBX%2B%2FvrY%2FgpQ9ZZkvDw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb8c580b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ee-1f1f4.png | 188.114.97.1 | 200 OK | 6.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ee-1f1f4.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash5a1abc1bec378cb59ac93e63682b19d9 30f25be54302e100eb08eb8e091893693f6b425e 4e33a73611cfe26afd186e7e7157e76326fc3443173f3d321b11b125cffb73d9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ee-1f1f4.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 6920
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-1b08"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aW81x5GFK%2FvooOD3pesEUCeFN%2BEn9DhXnMnJ9TmRrFXRLC7a%2BZLGxm%2B12kz5yZ8ZavKofTLbFG6vApA9PjnirlnWIG4iwdQp9EMGfY1sPN0b9puwJJWL%2F3oeTugrZ4ZlY923kuYZgQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb9c660b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e9-1f1f0.png | 188.114.97.1 | 200 OK | 3.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e9-1f1f0.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash365beadd3b72afe385a323b3fe4bbe7f f1bc8647226d5669e8913bb30fc6b9578795d7d8 27bdb70e1f78a480b3bb3de940127450cc892e031f9355feb6febfc51f975b4c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e9-1f1f0.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3255
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-cb7"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zZ7deFfYspenaGQyLl6%2Ff66wgyf4ZwbPUpRy5BifoZQ7Om6D354HgR46KSq93q63WEB5oCqZRWGmnoxER3A9xgs49dgUebeVBhn5OgmDW8cA0xjMhos%2BTvK8TPeVTQ57gq25%2F9Fr4A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb8c5c0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e9-1f1ef.png | 188.114.97.1 | 200 OK | 3.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e9-1f1ef.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashefeb85dd7fc187c206fc7bc5aa90c941 f3ebca4212fe163a656a0237f6efe21586adb925 8dea58fd4567e2b90de95b1ca3c0e47391d78aaf46ab7438fe6a7cd86529bcd4
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e9-1f1ef.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3013
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-bc5"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fi6wbTCGBHI5hdv9Hqj42rXIyqSOBRyxxFdbXeFJl5LhHKKnTGqZP%2BqAks%2BdQXoRjreMKh80ZxDq4WgQouReMXSOI6VyNPlyIwmHUpHPoZBB65ogy%2Blcg3oEraG1xm0hmL2Qr9p2wg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cb9c6f0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e9-1f1f2.png | 188.114.97.1 | 200 OK | 4.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e9-1f1f2.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash58d34980f2d034a223075e8fb06b8a1d f5e151d249e1bc329604bb093264f3e01453a913 8ead578a751ced89c42da8c5768fd8ae93d88a081763aae619e31343e0fbdcc7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e9-1f1f2.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4348
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-10fc"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m0%2FpbLt9ZDTXynb%2F4VGYHKdJscCcaG7RjDak4Dy0wBe5fsf%2BCeba4W8MdQZk8ST4W4fn5HXLt%2Bh2b5JLARfW0MPFt4R%2BQmlRNZyWQpr2ItjboqPXjMsR%2FqazLPeQSlVQ3KLg28UdpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cbbc890b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ea-1f1e8.png | 188.114.97.1 | 200 OK | 3.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ea-1f1e8.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash2c188c8ac03134c54a39425c0e1fb13a 5925b2ff4661ba438c6be4c4b1496e7aea057b1a 4cbee4996c39d1bee69777abb6b7c0682843ea8cdd9be4ea785fc49963190e24
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ea-1f1e8.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3878
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-f26"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NzQq%2Frr6ngN0yUSR0guOSyD5okO3B6fHnPIvdYh5VTn%2Bef3S%2Fqt90hgdmbtSXMNl3P4%2BdT9A2y682dN3Uam5mS9DHROg%2BqaI7xWnawXuRRZkyGmzlUUhJCFrjW04QeZbWMhr2WHzXg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cbbc9f0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1fb.png | 188.114.97.1 | 200 OK | 3.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1fb.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashb65badee0fa7ea1ef60b2e918f8a5215 1788fe44fec21473963b6b72a5540c756e601933 c902fd564f04cf607b5e328f615a8fda50d4a2b23d8c52b331c4ee65bc2670d3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f8-1f1fb.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3444
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-d74"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cAYM2gaLt6uYyxbpf9ow3xqqnyadJ8niJm8BY58SQMnOtH%2F1bYvI2kGFPpwOxpzaeaMPbriKpEB6McGv%2BUBfs3Cb77z6LzNQxQ1qhrE%2BApkMpV039symH9XPGHo%2FcbFjaNd2779pCg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cbccad0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1f6.png | 188.114.97.1 | 200 OK | 3.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1f6.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash3a6e5dd3978aa0f518fcf84492a1deb0 d171593ef1eb5c0ebc635e33237c967d2ce8414f a505f202717c10279b4629a22b0b81f7ecd6d196f8c6994b3cf08a05371b752c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ec-1f1f6.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3522
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-dc2"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E2KrFruwk1Cmpvtx1ikZARQLHQTk3a5YABhvI6fDjTcN6tG1UGAtxoCsD9fzhaMTuwK26nIlDSGmC9D82x4UeAgBqjVspJs%2B7xPf80Xt8YXpgflcbvNdW5C%2FixmzdfZZGSl9AiX6Og%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cbccb10b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ea-1f1f7.png | 188.114.97.1 | 200 OK | 3.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ea-1f1f7.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash9f947452f9b8df490288ba5b8db20ce7 879a393dc55bc28f0ed572d51f6ffdc446468d0a 4816bc747e44d975d6b1b8ebcd7245f2e37db41312eed980c93f380bec13f5ce
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ea-1f1f7.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3794
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-ed2"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QfNUTKWYOHSVUmQB6OE%2FkyaI6PKc2Mc2ImVb6NJXoW0lZI7VheeIZhsT1mA0bDFx2qe%2F2SVuwRTaTZNdmZvM8%2F3j1fIttWtNPyo9qxbk36If8soN1pvjz0KDNgvytAX33zWKk0huKg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cbccb20b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ea-1f1ea.png | 188.114.97.1 | 200 OK | 2.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ea-1f1ea.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash10eff95ebbc06ffe7d39d79ede495d15 d4ef721c536d9fc96ce07708b28fda20fb75d1ef e3918e63ae6a3f2afe3a73109a721595b7c64014683b6be6a404e7a686e96f69
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ea-1f1ea.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2697
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-a89"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9NXV5Govqg%2BLHocd1Rlw9g6J7%2FinZTgBNDs93PDqsbb1vSdjkhhSaFS7DHhfVpjs47pYXX2lokobww5ATXaHz2NEHq%2BHf7VLCnHx%2BlgmLG4vNPjGDVHQJPlfU%2B7gfsqpdoP4z%2BN4aA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cbdcb40b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1ff.png | 188.114.97.1 | 200 OK | 4.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1ff.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash409995be85292ffb50b007c258c87d30 1f39e20bd2b9983c12da418fc721d7f8024f4981 43228c797fb37f1414e1d78ae67db0f3534338a44f75f5a9d409f2098403b300
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f8-1f1ff.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4914
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-1332"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FifigSIxf1JzE5ac4Q8PXx%2F9VUslfoQh59w10xmT8fZDVS%2FaQHWxCv%2B9Dsc8ahZWMrfxMaVZsKRRzLV8iUtRh3gELHMSaeLsk3iI6lUs3vd%2BN84sIQXCLqJofU0rDPcRrHL4MitXzw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cbfcc90b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ea-1f1f9.png | 188.114.97.1 | 200 OK | 3.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ea-1f1f9.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash6d3788e265312cb026d487e206ee09d9 5d09e4d72ceaa4cd4acc6b59b45d62156f5a5573 2ba2a420745d15fb9dac1a31665c345146c6d73a8a94e5de05d2aca36ac38c4a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ea-1f1f9.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3659
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-e4b"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7MLrRINEHxzb2YGDbuc%2FYIo40FwGP1lAawAKUazkA7uiCZAgM0o6X%2FgPWNpsmjmdrUCNf%2B8Cl52OJc6EQgO3Obx1B8ffmFcZ0LRZGFVajuvGRYdUG4%2Bzcvbyt0bmBe4mAETC4O5FKw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cbfccd0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1eb-1f1f0.png | 188.114.97.1 | 200 OK | 4.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1eb-1f1f0.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash2fa9a7a52e5a9210083f5d8b071b5735 46af19597cfde4b378eb5ad83ae58e524fb15278 ad41020dfc084f68f34103cf9574cf4fef1c7160a55f8be441ddeff59704d8d1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1eb-1f1f0.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4535
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-11b7"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CdaMcAqqJunA9sTWSoXDi1cOPQrp7rf%2Fq6kvg6abIpBcbByTEC5FcOcOb0FhSTjxHYusOLYLcUL7HLMJLzh7RUpWh1mYf233frqSclCnd%2F%2Bo04e3SfYjrTDNnbu7J1rAlp4pQlipQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cbfcd60b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1eb-1f1f4.png | 188.114.97.1 | 200 OK | 3.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1eb-1f1f4.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash210e1654ca1aa6cc39f70e7ae4780c34 2161d2c532bc76f2ed2e479590217144aca0a442 7046269c0c772504c7324bf0f42c1c44285643143a207c2b5cdc970a9f1fe37f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1eb-1f1f4.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3693
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-e6d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4ncIC%2B%2FI9DqU30uO5O0nF%2FW%2Blcnna%2BKMOyMgkUGn4FY7bM%2BWt%2BwSUnxDPS5tQvuaANiY3Y8tuOyKXyWhwnPUXnyxsz6kL%2Bo%2ByE4LOOSwW6jl%2B7T0MyoWKA0i3%2FQ7qZFFXOuJbROCrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cbfce00b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1eb-1f1ef.png | 188.114.97.1 | 200 OK | 4.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1eb-1f1ef.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash5d4fc5021603db75fdeabd28e6e69cee 6a5f5c164afdd25d1938ca720064bd1bb080d81e ca2672d07ca705910da6d3e581b3e3dc939e276f5e10267f489ff505b44e494d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1eb-1f1ef.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4537
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-11b9"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fg3sIsamHoKDGY6xs8RN8nSefDb3UOw6mRz2g3n8yvkrrGsCcLSBIC3%2BbQN7ONDI%2Fdusn9iXeMU09IvJslM1RhJD%2BKOOoaPOzy9HGgmAcPE1Bsiii1DOxLzxNDwd22EwhaT9S0%2B0ew%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc0ce30b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1eb-1f1ee.png | 188.114.97.1 | 200 OK | 2.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1eb-1f1ee.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash9d53eae9645fb743a6ddceb81083b38c d8c4ece0ea0d1ed45d2ec6d1e3679fc256821ae6 a2d2ceb4598082ec2a3d795d14338ceee6d86423e7ba658e8db6231263b268b3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1eb-1f1ee.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2758
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-ac6"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ijhej7PdvFSYaQYnyk2IUtPf5w51PX62UQz1l7DKUZui%2BjjsKP14WijZ%2Fyp%2BnqWdp3qpzpHhHmB7OPkaEi1q9avo4FxVVeI44xRIOwgGPJpq%2FJ2VmJfwYq3SAwlF0fl53kVlXwVArA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc0ce50b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1eb-1f1f7.png | 188.114.97.1 | 200 OK | 2.1 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1eb-1f1f7.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashe55145c7342b31408383023b4ee11f57 71696126aeea1a738a5388c0a30c5aa3dbd58a8f 144cc9ef821144807f72c6ee84170156040a64c4d3c7d4c150e4fe70249b805d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1eb-1f1f7.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2141
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-85d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bRp%2FB3ntRHM8oqk1Pcnb%2FdYly816lJ67G0PcVyFoz3xqwWXP24OrV1sNA4sAd%2F9nMBR%2FHG%2FETcLscgRfFi1AT3fGp1IraoSXw7Na3pCIv5EdlV%2FuB9bMpurkW9U%2BKFNcoATIk6938w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc0ce90b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1eb.png | 188.114.97.1 | 200 OK | 2.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1eb.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashdf7b1386f54c25376b9d2e6f9f685662 85ad0107ac1ffcad8537141e824fb8bb742f20ce be64be4d9f7b9d9e163ce48570da59e9d38bdcc7fb20ade82bc58ccaa1b09e5f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ec-1f1eb.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2832
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b10"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mQpIKa1e9KQRW0jl60mxEVTncu4RaD%2FC8mRTOBtsvGJJnsihFJA0p%2BZStuNzs%2F7omFAmBttDIm6ocBiAcsS9CbtpxEs%2FM4EgCJ9eYvenaWUndqmMmn5ddUr26wz6eaElICbknDsgPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc0cf10b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1eb.png | 188.114.97.1 | 200 OK | 3.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1eb.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash5d8c2b2fac3f1bd7f05a20250094bded 3c4d2a92cba717d6a958b92436628660500013cf 2fda000560120d270dd72664b5e80676dac9b94dcfded650ee3b221f30ab0bcb
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f5-1f1eb.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3556
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-de4"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MtpUAkOqbtk88lmy%2FHEO%2BJZSZgfDHB%2BQ%2BkihRMsLKcA79yDjJF1lzv4Odwg6shf5LEHghOcdj2rK%2FAkZetwfy%2Bkm2jiOtU7r4DQUCXVOMMaJN8%2FFAGlbWoUjZxdAd%2FZckfcr9SxvKw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc1cf40b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1e6.png | 188.114.97.1 | 200 OK | 3.1 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1e6.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hasha618fd481916aac3d98794d49805cd3a f11cc58501d59d22554825f8895c2567b8a1fd34 feaf849b990416d35b7f9e584048616eb528d647c6777eb6b44e40b3df2900aa
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ec-1f1e6.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3080
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-c08"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cROmzeX8PUQMj6b%2FaGw28BDiahh3K6HXKfdmaqGN%2Bwm2TTx9KIShaZhGgykhh3uv%2FuGZ2VQ4HKkoyIV4p3IiYFVa8%2F%2Bj%2FQPHPoekO5PvHwv4YRm%2Bi4Hq2WvGCYGukPUdXpuow55H%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc1cf60b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1f2.png | 188.114.97.1 | 200 OK | 3.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1f2.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashb9cdb2a75a7ce963583bc147d7183c9e f1a10b89fcb08bb368a6fa5a9926031421bfc614 c18df284bcd02f9c5d4ac4e4ca3cfaef6041daa34f67f79b3edebb910b60bb10
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ec-1f1f2.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3692
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-e6c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f9qzCY7OjFXOGWFPf51Y33WyJrOr73ERZxEtvtLcJNw%2BwqRz%2BAfPk7EB6oLMyPBVUdDdBaCJUpwXBRK19Y7e1czdqac%2FdWw1qyN3uFNqWlFUENuMtl7OYQJJnGABELxd%2FMjt3w7lvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc1d000b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1ea.png | 188.114.97.1 | 200 OK | 3.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1ea.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash81d1f7d6f37284da41edf7b85386340f 2cd95226c401bcf377cdf15815c605e1e359e15c 5b6cf9d3a97a2beb8e2903e00bf3043266a8b692de26e2071d44287ed7e254f8
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ec-1f1ea.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3657
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-e49"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6r8xZxSoXJId2aZRRwgPfSs000dKA5j0xMIp1Jnbd9V%2BClXrrx37vkMw8qitk29mTjT4Yv2MmOo6qNkWsQY%2Byso52x5LQa330cwi4IT28HpK%2B4ekRAKmVOC1LWKqXZRp%2BWzJZCu%2F%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc2d070b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e9-1f1ea.png | 188.114.97.1 | 200 OK | 2.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e9-1f1ea.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash62e9d67b961cd2928930dd6689de6ec5 a38d702d0cba53173053b910828082807ad3c3d7 cc520121709cdbe91a9a3fe29abb00d6d1be9dca912c5af4efb5a5794ce47499
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e9-1f1ea.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2274
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-8e2"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NN9qqPeJ4mpnMwGd4nzt4C7sRXkoyUX1L4Of%2BuSar59ZiHJgKZEqGyV8vbgNOYzmZcAVGAW5pTXEvmphfsacL0Or%2BmL8kBaaJknj8hG9wO5N7c0jnGqlqzIRw19tfYcvfFneOpe8jA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc2d160b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1ed.png | 188.114.97.1 | 200 OK | 3.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1ed.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashb33a080ac5ae56006078bb5541418aa9 73826becb40f549e3bfe29653607d5616e869f1b 1cfc319e93238ec7aac21e603229ec80ecac0dba1033504adf5240bf93ca876a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ec-1f1ed.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3223
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-c97"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BxpjWNBb6RMaGMJmx1fFiTxl3A4ioJDrNDsY%2FtUsz%2F6HJlM0I8v5flYxHmKwxcQaENsXBJR8i0Vdpvk7okkyI7tx4ZQSO89tnd3U1jNajgYBmEUMZEalRm1INdVJeFBPH4%2BjVpLoeg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc3d240b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1ee.png | 188.114.97.1 | 200 OK | 3.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1ee.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash17c0490d2e6395dcfa7c7657f8f2649d 8aa99c42b09504e2507c3a45deaa5bb11b410d9a 9dfdd5293449c936319551f212de40a30aa0f4e6b5cb04ef59455d3a38d21ba7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ec-1f1ee.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3267
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-cc3"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=49JShV9T8MI06yUFg7w6%2FSIUuVBMkbp%2FMHqDeQRWuDEI6cE3zZ1O1%2B%2FaNU3m5t08%2FY0rr7OTN7y3FIURJJQNGXRWqAWNzSVE0LXi4pwMBe5v66NChIIlcwh74yHZhMjGsdY73HWUJw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc3d280b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1f1.png | 188.114.97.1 | 200 OK | 2.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1f1.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash5b08da2a1d8b7991025aa9b1b906110f 439018562e50d0c1458bbdb1cc430411c1ff34b5 e229ec8334d01a7ecdb79092234ba7a9593135893135b3ed2a9f5814c39c7834
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ec-1f1f1.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2909
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b5d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bKzrd65%2BlxG9ClbxvtWBD37iKbpyrNd3TSE9vKNqO1pIpjMJTcZZDyKR%2BQGBJy4MwiXByaTGvQQejtcoNybvq%2FEcw30wV4FA8nZLLB0ZddWrHqSMMuNzh%2BEIkuU8IxI25VuKo0%2FL4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc4d3f0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1e9.png | 188.114.97.1 | 200 OK | 3.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1e9.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashc27115f1185fc29e1a2c6cac949593d5 8894e58b3164cc8550a149e6ffd159548fc60755 40b97e9ad9d65372f8bfd5eb67be4963079d6263e69d87e1a731265f5a4c7e1d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ec-1f1e9.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3846
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-f06"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=67sDC1LNWXH7nMO7zMIZlpgmJl%2BeK45ZUx4mo4cK3QzeIQnunJLfz2q8pYQ4%2FZpelkUraqRO5Mn5R5OecVSXPldwW5k66rVc2xqFSPuKSdtSgXSWPNdeoAhItXW94TxQ4NZjm49WTA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc4d450b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1f5.png | 188.114.97.1 | 200 OK | 3.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1f5.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashd60f5fe5e366e70cdfc0dde4587b3017 5ebe0b322df6166b88d3f50442c4f4601c23821d 542767c8d06dbfcae138b854589eccece1acc6f1f4c4ca2b4c2f9ea5b523a434
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ec-1f1f5.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3564
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-dec"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iCDY2h1PXO8%2BL4f%2FbiIVk5grQSYPgJE%2F459dM9L7iMzEMF1JWY%2FRGK%2Fg1dgjQLS0yAT0IjVM7jgdK9NP9ROrdXj6NuCwCHkkKkMqN0bkgRqp%2FiStGqt%2FP3HLV%2B2O3cRBZ9azDixrIg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc4d4d0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1fa.png | 188.114.97.1 | 200 OK | 3.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1fa.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash7867e849727d09427e689916903800e8 c1637240c7fd8c2a3452830e927a8602f696c78e 8cd0e6731aa5528ac2cf6b897709cab08c11cdbe35204f75040b1b2168dae6fe
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ec-1f1fa.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3009
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-bc1"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9zpI91UN5GbIlw4%2BBLxC2Jg92MZuxIAhoPFJnl%2F%2Fz4riL6%2FfrNfuYOpBVvHTMdESvaAnr3Uoy%2BoA6VbptPjhV0DNr%2FnLelEP761sWoK4MGRpqYNuXmYR7ja%2B3VUMN5cTLwNXSmJbRw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc5d530b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1f9.png | 188.114.97.1 | 200 OK | 2.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1f9.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash63fe892d38e467f8a611a1bc9c59faf4 00d5a863bb1b4a94a397b44151aa0b633ac10ff9 1545f19168d99d5d7d8f40fb9ea724baf0170c78466c1889422ee7ec1b804720
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ec-1f1f9.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2890
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b4a"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UOD0LUh3Hx8cEoBqGcuHGnDcJtCqOEvCIofesgtwry0ufjrIG%2BQL0j7ekdYNl9nFlqrGixWIZUeo3YZCIjx7XWPXGeHyW3iQm9i14jzgnUiFRIOOd%2Fv1nQBj%2FN93MzxNTCiRbd4YVA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc5d5f0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1fc.png | 188.114.97.1 | 200 OK | 2.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1fc.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash861ffd59c2cf72ab86bf0e1b9a7ad329 6c2b83e61edb24d8e4222cbd4ca17fe4de83bae0 cb587a65f8323c7c453409042bfa21cabb1a027cc30fdba439495e1b9541afd5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ec-1f1fc.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2800
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-af0"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9ZNx%2Fu9vPsjFzOG%2BF%2Bf5kT91Plo%2BG4%2BaErBpGv6PfEIYoN2SKjcI8feZbA5S40rMc28sjxelqEIAbdETRhKhD3c1mslg6MZr%2B3pfuH3iBlRTuhvXMcTGjeQal4L%2FjcdOlHI22ST75Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc5d660b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1fe.png | 188.114.97.1 | 200 OK | 4.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1fe.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash914d42f1ae99c610423d2b5fac315a94 8bea907911587ed5fe8d72052785409b202acc98 a1e805a6087b9be4cf3e876cf5d41a398a2cbc191d810a5e3497c4e1bf43122c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ec-1f1fe.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4265
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-10a9"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RFBoHvjIYy5xijxWPae5S1Jt%2Bl%2BEybzsV1o00vKmYoTL5fE2nbYplJTEYx2aaskqbiu29iqiCIaGGboR%2Bua07ZvH1QgtCRnfuVaElJ5BCWWiAOOQZBorMFT9K4TxNj6p1XHZWMASbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc5d680b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ed-1f1f9.png | 188.114.97.1 | 200 OK | 3.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ed-1f1f9.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashe5ac03c1200d76ba092fbf950f91b993 6bdeae35323f88e29d7f2564037323de2d594d3c 5ec09892ec125e15681ae3683a52af14d6cedbc342a8058abb1b58b11a81b902
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ed-1f1f9.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3028
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-bd4"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MUbzXbUNsKdtY4UVhlUziDUiD1TFdHuDZ4D53RAUCLHNpnawvvi2s4bJZ%2BjuwZoJ8KwPk2ZCrKu4yHTW1TS6tkJEAk1eDJfSAYTNYxotQbKiLciDwLCJfgLWbuLCrLNxnZCE1eU0bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc5d6a0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ed-1f1f3.png | 188.114.97.1 | 200 OK | 3.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ed-1f1f3.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashff32bbff288ec50b5cabed31570cf2f5 bccafb2317b82f767a9c9c791347d42cf576ba43 24a65076ab9788bbae68f6fdc6c57fd05d15b0c3e6c7b3ad6022fb9989c14661
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ed-1f1f3.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3388
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-d3c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lxqo2LaFUv8ODgzLfu%2B%2FTk9slRDvMVmYAEuO4%2FKbwnacIWGdeb%2B1E66ZHEzR7aSJie578BB8FKHaB3MG5K98y7uOLJZhvn6%2BGTf2OX9HRsfR%2BqiMil199KKZ8bLlwsRQa7V%2F1BMo3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc6d700b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ed-1f1f0.png | 188.114.97.1 | 200 OK | 3.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ed-1f1f0.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash20a8647e06a7b1aab90f1247c743ce03 9e1b7d9d187d3903a430a73c582a39629787e3a3 951b76ca49485314c06676a455145f66366cf65ec9d33d6c06d7122f1692f8f6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ed-1f1f0.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3240
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-ca8"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hpeAkYtcJxQ57sH5TVcHWN1Xa98iNKDVWOaxKN%2F9ySSoEm41h%2FCTyqjliWnpAS3%2FayKy65bb%2FkGQZQN5rlxtsOnX6BbizIxCc4pTw4yALniT6vMb6PSxmx66Q6hSOS1XvP6VHUmFrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc6d780b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ed-1f1fa.png | 188.114.97.1 | 200 OK | 3.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ed-1f1fa.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashec79492351449770d9edde6779addfb6 c2f5c4335039eb644652842180a4d30d57a91f7b 92f7f1236fb9e912bf7339444bbe9747ea545902cb89cc06165c5b96e411bc8a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ed-1f1fa.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2989
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-bad"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4Bazs9bSV52%2BF%2F%2FmWAnKxY%2FBT8s7bqim23o%2B7UQJCwyMgXq7c0mV6bwHAjGpKQhY5bgR4FxjOTVsqT7Kc8xuPUqq%2FP60wufBW123FW5%2BK5wDbn6b8ZC7%2FKAt2620RFZXFWHttNKztA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc6d7a0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ee-1f1f8.png | 188.114.97.1 | 200 OK | 3.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ee-1f1f8.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash969664b55b9c30c631eb554211975424 d75dce86ddebc4379933e4052161f0538f363961 803e4ddc12bb7db4687c3ba54c38cd6a5548d60c4fbd530583b1ebca156e291b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ee-1f1f8.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3844
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-f04"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dhbo04Dhiw3t3ncqvMVUfGyFWvX1iNEOFGd%2BiTvnnAtSUMnuda3yyQXMhfskW5xZR5ec5kAsu2%2FvENzlO2%2BxyQ8VtEEsFAeJbYrhfacBeTilbsVxC%2FVDu2pJ%2F2K7sFc30Nicv5rv0w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc6d7d0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ee-1f1f3.png | 188.114.97.1 | 200 OK | 3.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ee-1f1f3.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashca9e5538944fa5032245f61b8ab6bb0a daf05864926eb3ae50615a3d70188c40af3e8a63 beb1440d300b17402d46bece22bfbc19e8f38193354360829492fec4ef285d68
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ee-1f1f3.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3359
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-d1f"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JVXCDVGpHlBs0f0a4on%2F9zwq4wzR07ZqEXLmy2AGRNjVP%2BGLDXXAWbaHCv%2F%2Fr68KCKW%2FIbvB8Z4n3g9NleWs1pdI%2FenOWrNByODtGHvWMR8DFjzwGX0CNCVqhRwhM28Ystu%2B9k2%2FDw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc7d8a0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ee-1f1e9.png | 188.114.97.1 | 200 OK | 2.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ee-1f1e9.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash1efce1a053fe61d05a90980fc26420e6 b1eb21e2fde9c2fdbd2a4a531619b0b7b8e7eb76 8ba8bb29313dd0ee0c750ad22e8423ac6762cfffe53f82432b4024441acb1cda
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ee-1f1e9.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2280
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-8e8"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oV4Rl763dKOashQAA2xzWp2tLCMzMoOtp2x81FrT3r3iKcWtO4TqdSNdziVRdfW1c2B93iXE8hw2bel5NoQF1%2FpsZZ%2FNN2KzpAZZyEMSWS6U53uKKC%2BMCC098GCqttT%2BZCU7n0RvZw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc7d900b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ee-1f1f7.png | 188.114.97.1 | 200 OK | 3.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ee-1f1f7.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash0f44564cf0d543058945ba6cb3f1354f 2022fbe1303a704c9e609e7b10de60020bb25174 3b961a7c18093409b4aba025f0df3346e765e119cab2488f8dd09214a7974bd8
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ee-1f1f7.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3437
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-d6d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IXX8rKb8IuXSmwR5yA8P%2BhQjwxvsTkqLc85V3Vjibs8ncCkthvB9ZH9CZrZ76VLlKl%2FxocBZuW%2FynTlVvUbm77Q%2FQMhD2SlbmX2FzrumrgY25TLs7rAuaOqPSlEiSbTSgvBZjGTgMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc8d980b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ee-1f1f6.png | 188.114.97.1 | 200 OK | 3.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ee-1f1f6.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashd15f3398dae6bcf876549d77e5ae867c 20f383811ce2b22d6381525bd708371e097c8868 52a7831e8d0eedc415aa40c2db6cf80d581dd0dd63e3fd44ed3ac0386942f2a2
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ee-1f1f6.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3034
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-bda"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2r1iR7DFKd21imOdcsomdaGBCL5821GCylP1JUq%2BIUwlup72EWmQ0%2BOb0IZElJcdQ8qQHUUSsXI%2FatwmmiF0vJsP%2BWtSpaX7k9gJMgd70Lkdm4q12dNdApiJ7ffrItk%2BJBxj2wJ4BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc8d9e0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ee-1f1ea.png | 188.114.97.1 | 200 OK | 2.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ee-1f1ea.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash8a15609c9b8c1e5c30f5d6f1ef9b0340 20523a1d2421795aed96c57e2b3ddae029150c36 6d2ecb641341786ac728f646e0323e61caaf0392f4178f679492c1215536c149
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ee-1f1ea.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2150
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-866"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FGXIHqXpk5BRrrWXp%2Bbutkemad8d7K4WdQkG4FpP9G1e%2Bc1rI%2Bq3XjxtZy%2BbvZKMt7ScoqgEkMlwGChrQlqFP9e0sodTWKjPdOyuLx4kX0F%2FdI8B2azPCIJjy360saLyrpJ92gPaUw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc9da60b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ee-1f1f9.png | 188.114.97.1 | 200 OK | 2.1 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ee-1f1f9.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash47094760e27e3704c2e272e6c532b9cb 9e418acc8a0aae29fd55d2acccca9aa3e8b05788 85578d34dc587353fd7a1bbfe26c2b62b36bd74b4ae642ef0fa409b75cd4b60a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ee-1f1f9.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2128
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-850"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=20gyg3C4p1ITladxYusr1IQQ6qRgxXNUwqULulH%2BqgBi8Z0RY%2FGrossCO2vnE1wnCuj314EkgOt4ugXnbOvpRKUFLJfgGatm5%2FTrLms88Y3k2UcAqrI27MknN8RBm94Qvcd%2FHJiBDw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc9db80b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ef-1f1f2.png | 188.114.97.1 | 200 OK | 3.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ef-1f1f2.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashd4dcf761f520aeb4f753c0e55da4d8e3 55f3f67b053e353969dc7ccfec4d60d0ab7c75ac f0689ba144973316d580586b7d56846e0338738fee3e652837131a56957a99dd
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ef-1f1f2.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3645
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-e3d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zwy17cDM4s3Z3GaKztX8gPrrBPNUAbDFE3%2BnOAnXsqNxOfBTWfIIV1Cz4daZ6S4M6op6Es0iCfog1yTS2KWXL4dTzL5LwRe9mRr%2BMqUYeKwqkz0zPijXvF2Wqfh2T4qQFR0sxAhPRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cc9db90b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ef-1f1f5.png | 188.114.97.1 | 200 OK | 2.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ef-1f1f5.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash72f872b89688462bfe7bef1020506dae c32544fbf39386fe96bd0081dec10e708aae51c6 cd27b3e55265f548902fad33da4df8809a569234fa0673ba4e6223d92dcb4cec
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ef-1f1f5.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2190
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-88e"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0D%2Fujrxn823f6FiSM8MBUmnalMYq0OjpZ7Glwa%2FwGe16lxqnqFEaLb1bDoX%2BaGmF1j7r0G7lRgbHLyIE2x3I2tQRSpZ1aA%2FsVgYti0aE0wpaWbCvGwT0q3eeGUMNcXGBblNIlValgg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ccbdce0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ef-1f1f4.png | 188.114.97.1 | 200 OK | 3.1 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ef-1f1f4.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash999c29c89776d74d2c159936900ec17e da7990ce2f35480ee8c9164b61e1af04c139db43 9a679f9dace73d4ba1c8c6d4a2a349764be37277ef0be41e8da583590753d4f8
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ef-1f1f4.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3112
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-c28"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nzW%2B9QDna1GhWPXj2YWejgVlbSQg%2F8ivno6B4GqTamO34zdwy4PgyNcxklPe%2F8BsXyuop9KsQJHwfixfjDfJjkd6l5S5r9zNx4JwRsdhrux6IF56DngVyMrMG9yORnNM94UwC%2BsMfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ccde090b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1ff.png | 188.114.97.1 | 200 OK | 3.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1ff.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash3c498d3c412aad668c6ecd95e793fd9c f6f4ba0400a4cec824ebd26800e139fb2dbb7be4 2bd379d8d9dc1425affc625fcf5e366784dc416f4e62d40ffeb42ba88a872262
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f0-1f1ff.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3638
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-e36"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uyxx8b71VEIF3Ek4lIB0m8WnmgQwf9pw2sEoOGXw%2BngREdKLUD1JkNYvFH1Qs%2FjogoIl6K5Dm6%2F9m6SuPHCL49bQSpl%2B6mpv7%2BtsITvL6zJTgTBrQjbXkeZfps7d12xH1i%2Bg7cL8%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ccde110b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1ea.png | 188.114.97.1 | 200 OK | 3.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1ea.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashf2d90d66b0e9b27e8498a583e6ba5bba d02fee08fb228d5f62d1f4c1e170446190c7e992 5886154a996f6f76335ccd6ac2024d617436223498b7f17a50c19c0e3a258db7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f0-1f1ea.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3674
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-e5a"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Amq4gs44E5OrOBpP5KQ9TJApOFouBDwBzxqakI3RR3vJY9ZA8qEcoEZJuX6ViZOd0jdZPQr6ZIYnxACP13uJl01b4BIX7MGLV6IbY8dBstEHltRkbY1j2L9IAdaa0cIzH%2BwP7igjwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ccde120b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1f9.png | 188.114.97.1 | 200 OK | 2.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1f9.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash6afdc75c2c1e031313f8053e2044320d a4bf1452fa8d09a6316d9fe17369941c9ffe71df 1961cfd578b6c8b25808d06b16b449ee12918c913305f89814ccf37cb5f9b3ed
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f1-1f1f9.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2924
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b6c"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ufe%2FdC6h29TseyjJaa4%2B7LnEn%2BdCsW6IXXAnTT5sX06%2FpVeP4owEctoFr4CSUw9newNlJo8UXpItv0alDvOoXPtfb1045QVW5d8OJuZYtDW%2Bul%2Fpq079%2BoWkxyRn7sjE6qDmM8H1Yg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cd7eba0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1ed.png | 188.114.97.1 | 200 OK | 4.1 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1ed.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash4996aca3b56e999ff2ba5e69b8e0ed10 4003b7b23cfcf783b5a8fdf923d22b556500a419 27834cca4143e3b136edd504d703e8bde9142c5c971638161848d020553f1a7e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f8-1f1ed.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4053
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-fd5"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PGjdPjy0Dvcx0AThXayUV0bFK9dRI7neLIiLLJsD0bH0Faj1d1dQhz6WxsQmIJ3tIE15SSOZygW%2Ftd%2BeDqJeVHveM9NfMbOgn5tqWFkxBoNa%2FACcy%2BtkNGaHNXeAU%2B1PwhDgM1zmMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cdcf150b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1fa.png | 188.114.97.1 | 200 OK | 3.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1fa.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash82e255b7d99d86e9e683ac3a4c0d902e 9144d1aad6a0ec38d30aaa87905751c1e6c93461 08dab639b147484f64ab4713e1cd30251008322e0ea626ce4f3623188f43ad84
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f1-1f1fa.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2952
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b88"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VJXLDXqbGMw9jKSVps91wLLMmEVQpoj9HtBFyMM2i5PxDizbfrvGdo7t2ceBAvyhswf%2BxDlYbM2SoMA6AqWTR11wGdRgMHRf467SLO9AmiryhFDwjhpXYBLwPtb0kHfUgZM8jjMkZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cdcf180b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1fc.png | 188.114.97.1 | 200 OK | 3.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1fc.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash6ef540582ae88e58109eb3fefc807c60 c06f272b8b9438a03bce5bc7cb61b225ae34688c 2e5396e4a7a5f6b94f03755f7f3ba1e9a73f28de8a885dd9e65a78dcd0f8f20c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1fc.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3002
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-bba"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pt2HhgqaVM7POUFfnKJs8FB%2Fkyoe9lrX6re19uAWSQQSxBrvzIjsXlNRkV8lk0ZE8QCFjp5riaxNkDjnakVvwUIBu0tAy9dDfcRaObfYcvUYp5Ek9VrGL77NfJy7qaxwP%2F7c6vTYwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cdcf200b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1fb.png | 188.114.97.1 | 200 OK | 2.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1fb.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash7edeebfa46b41fd524ebc986bb304bc4 dc5e3c90f9ba2890d8525d1f22f72b260844067d 5bc6f07ce198eb857522f38971574d7b3df0e40d17ea94c84060e8a891c7a2c6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1fb.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2880
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b40"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9oOd6ScGHpnDoTvLxLaKG4jaWGm3mP4zJ5u2GNmtXLaGoIOB7Exe%2FXICqL7ncyIIQW%2Fzk74ubzAlnKdRHCHqGuUTJRY9wPShf72Harm95d36V7vo5fi2E0vBAFQSORBBiOa0fIo6WA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cdcf230b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1f1.png | 188.114.97.1 | 200 OK | 2.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1f1.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashdd161365d7a9b63ed0a03119deead1ce 2fa537ab49697f85dfab8e132b5327819d3461b5 0ddde8270c17df31c059d4d13a00c0032383819bb079cc670be4cdb00a7ade58
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1f1.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2188
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-88c"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U6BNsBG3KZQ2a6VuDVebbkghvsOBMdkMbtTlNsfeC9XXQu0G2jsNszIdT%2BVxWGHwoGBeugvX%2B7Kh5W9uMKT2bwh%2FMu5ZKnIqswgo2iRzY4zatg0N5iGm3Q%2BoMvcPKptHrNQKUZjGSA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cdcf250b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1f9.png | 188.114.97.1 | 200 OK | 2.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1f9.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashfe2f426f15c252e1d15b9fa52b18b3da 270ca86f7fc28edb632fe6ca375a614e78a4623d 8ddfd4869ebd85e66a7f0951b1388637ad7ed75c78535499b6628b6e8e54f41e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1f9.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2271
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-8df"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EF7w5F%2F9j2Qkks2Fco%2F%2BJeA8Mam7Rs34g5DCfMQ2uCSqxWfzrcDKHE8FO6FqHt5YZh5Xe%2Fer5L3ARWITcnoUoC91kyOcYCZ8OFnRNxfLUyTyQlmW6FGG7IGN8gEPUB%2Bal50TW46bjQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cdcf260b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1ee.png | 188.114.97.1 | 200 OK | 3.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1ee.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash0b32ed1f9d3eee835592e62163ce5a10 8f335c4d2ec1ab2a2f955b8911f9dbcb7575580c 1e2c8b59d4be7bc1a66e7e5c5ae175b6fc1a3c8aa3808691d9a5619fe97f4bc0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f1-1f1ee.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2951
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b87"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oSMgDWqdCWVvpljOxna%2FtqNok%2BGGQpm%2FGb01pIq2aN1GhOUobGwHWsyrnKCYEth7RGxb2EGnRU3FGw%2FqxNxfSkd3P7PzZT1hTYOuIBKaXle5cLMsNvv%2FgeK3ZErfN7sV7th9SqwTOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cd7eb50b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1f6.png | 188.114.97.1 | 200 OK | 4.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1f6.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash83c74ced98f0724723dcc4f8b1cc6711 d3bbe24d2a2c0c19aa908ac738bcac24aa095286 e087e51e09bbc085e588fccfc1691325b494f6c00c559ee6f52e1916cbe60030
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1f6.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 4430
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-114e"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mkbVmWz9zSam7STTZpT1Lm08f0FadZjqV3FIP4Mp0PUiUypcSz0khhIouU%2FxIUQTp%2FAKmMOoozD5QMRHe5Qz9zeuLYRcw23sMc8N6CObFk05y%2FWwa5BLXEkKFXyvQqvCwwKsEDJjXg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cdcf2a0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1fe.png | 188.114.97.1 | 200 OK | 5.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1fe.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash15146f32e1828a3713d58e1b973aaabd 136c79d597b63186ca0c4ef9db2928380adb9a63 986e39dd47c54426b52774dc99809bf58ad4f02fd22a4be24d80164afedea5cd
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1fe.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 5537
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-15a1"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VTfzQKs578ltO7%2F%2FgMKdu1DYiqcSfsg7S0jH9%2BLxdfQWO8DZ79tHXL6rPLUhJR3SA3Blw1OHpLqunUib7agXhyGMRCj9%2BHYznFfT2JsDEXByxHMnCTdCV3u%2BSmZ2KLhs2h5XQWR5hw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cdcf210b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1ec.png | 188.114.97.1 | 200 OK | 2.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1ec.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash20f797c29f299bec9848f174c196a08b 3413d6f9def7f4064e0fc8b81e7fc9a24ecfd5df 2a12aee8c2aa2ae5669725e15c3e12a812df1327154bae3eb77e28a8e953b009
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1ec.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2370
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-942"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PxaObAH1Oh2U2yhPF2m%2FiCubKTFvnZO3tp1EMMoI1I9JA2i9so6Vb%2BxY0IR7VMX8DhfHs3D7RUHEeKhgaMtCOWq8ggEkp8cjzA3XJMJwB547%2F2IGotrEQuLJpiXQDXcKRqo%2FosspBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cdcf1d0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1f7.png | 188.114.97.1 | 200 OK | 3.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1f7.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashb382841e0855364b3fd42e2396466f1c f0af2e9cd2a5cdfb18cb8b0ecd259a4264064d6d 062176c90a2f671ced9510a6165ed9441a13bb0d17d902efd8729942ce1bfdec
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1f7.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3456
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-d80"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z41n6Q%2BqrLGqbGQeyCx%2F7oSRc0Dp4KNon9%2BxThfU8LD1ZB5LkMQ8oQ91YBLfo7iXj25PqCnC5FG%2BMcRk5zQO35cHynZDccywO8DuLpcda3ZcpXmqBxy19Vo6ne9JFdGhQa%2Bb1xsOow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cdcf2c0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1ed.png | 188.114.97.1 | 200 OK | 4.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1ed.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash44d9731fb04df6831abafd20b951f9fd c76e4cd5e39852c7f810ebe253012bfb586fa9b3 c65de6f006d68eb6b90faf7a46794dc13b896cf46635c4eeafc35abb6e29e72d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1ed.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 4151
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-1037"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UEQI7VHWv%2FfY1JkvulLGLPn%2FGYQXuOYUulTSPsM0jdCmwSTmzrxml%2Fxslb7G4HweQsu42o%2F3JPLBNWQIzaFKQwEdS0pYWEyyj1udus%2BzA0hPge8B7Y8pmufN7aF8QKLBmcBX%2F50V8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cdcf280b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1f4.png | 188.114.97.1 | 200 OK | 3.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1f4.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashb2ce2d72b8841f880d80e39f3f393940 614062e87bbcd8630fd437e7458b01c099bdf2e3 3061202a3a09934defba22ed32e94e36b2537b1ac074fd81bdf497b7651ebcc1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1f4.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3300
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-ce4"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ifYscpP9tv%2FdzSOxWYmWl32MVezUePtw6n%2BnybOVBoJIqHDV3%2Bq6gTlJ%2FzX3uBeXBHapNBVsnqYdkCUKZHlYnplV2IDV22agywH1%2FzHPLmc4Utu8ixs%2BHXHb1qWa2l%2BHSI7hM9gL9g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cdcf1a0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1eb-1f1f2.png | 188.114.97.1 | 200 OK | 2.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1eb-1f1f2.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash45c86e5178737a53b2f40dc61c839b54 3e425af1364a3901e7d4700ff31b0fd0bf4e2716 aed5b82a7b50a5c2d814527cfe995a0ecbd9aed3e54b88b58250976cbbb40ead
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1eb-1f1f2.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2718
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-a9e"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E8TZIlU6GgoR%2FH6H7T3oo4tltVqAEW7bp%2F9Ncyh%2FZFz7cF%2BEocQ%2F4hlP9Prg6NlccUC9gSbIwfCgvFZRh5hNSafO8hnpL2rKFIMBUvpbrJnX5sg0YEHOVXyaEqsednr9hHNx8COxYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cfb9780b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1ed.png | 188.114.97.1 | 200 OK | 3.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1ed.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash44fd527239cdc33af5726b00dcb26b06 9d3811b396b308daae312464ec4864c3ed0b4fc3 a9dbdf064d9fd22138994e83a581271d07a70fa97ebe62d02b0fdff1a44418f5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f9-1f1ed.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3748
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-ea4"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FhDwttdq3PYOoM3SkoL0%2FHLWbB0W7xqAjx7LAcGBsTgoCg7HzVSPscafqNP8YdjzB%2BPVb%2B5KAROiAgaeFfIRlQoxfOcRZpuRE0gMU3%2FcORMselbRaIVOSHMLJ%2B4Z3lxIBJU9iermeA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cfb9720b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1e9.png | 188.114.97.1 | 200 OK | 3.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1e9.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashd583ff0e9dfa117c90d1edf5ab65145b 5c7c143aaca55965c35e0dd5da68070abbeacadc 3edae1d5785dca0c9e8cc4d5a2233a09f15c644e94ba50c04fe1e89f91ccac71
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1e9.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2985
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-ba9"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pnggLAClbB%2FO6Nu9LDnGF6RQE19uUB0NU2CoVDfIRzWme9Qd9yVnnTxSoGMZF6koEKgYsu50g64t%2Fw09dO7gIleGXZeHRBzifpT9Um8gumka5XVKtGPli9hhfyOptCxmuCRj55toNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cfb9790b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1fa.png | 188.114.97.1 | 200 OK | 3.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1fa.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash5c027e03b6678468d99173450ad65a5b 3933ad349e3971faa82075b0cdbc96689f7c825a 95d9b577c68c1a0a25b220371bc463c5f3cc2852478c79c35538df2835599cc6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1fa.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3261
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-cbd"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AnfeyojtN2tbqL6Ps5gi6IGHmq1w%2FAK5QZpmMtYgoKhwVWS4Ih9KwlOL6a5f0rgZ96LBNAsTgmIyX3CxbCuIOrAAOQZmflEiSlfZ9GmXDN0MyYp9AVZpAwVn555AettNyuHB%2B6xDjA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cfb9740b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1fd.png | 188.114.97.1 | 200 OK | 2.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1fd.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash5d33e8c19f4b4795c8fe569e1b5a69d8 bd1174e0ca845076cb867c6c37b0807b2d346e7a 8ee9c2528bf31879fe272e8964533e448f7c1d31636946b83d0322ea8377d059
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1fd.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2689
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-a81"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l4CLg8Law8cqSuJA6HEbtWZxtwD2OJTyYr05GM9r%2Bk5lN3XUnWVx0Os7LoGE3amQFp4YWMxvkXVEf0qEykIrUFHzJsw3h83kirKmarCRa46NsIzK5Bd2%2BRPrsYvdWDoqmzqimRtKbw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cfb9760b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1f8.png | 188.114.97.1 | 200 OK | 4.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1f8.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash877d5e17f9fa38fe116bfaa86d119797 ff7c9559f0e1477ee17b7863afc8e337a2bbd649 cead4e4a72ec1b986d14e7dafed184eca32aeeb3b204561596cd57ea2e3cbc00
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1f8.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 4320
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-10e0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9mGjQab3SW1Gp2tlzRuz%2Fao6Jj2BHCJ3ch1%2FzpgAwj2g7PWVdOvJ%2BQwnV%2BnFTLF%2FmkIC6VLowg0XRTMeFvltM13GEcwdON5SlBww0IMSnBh5eZYxGndjsZJMtHYR96Rijx2KMzKDbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d009f90b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1fd-1f1f0.png | 188.114.97.1 | 200 OK | 3.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1fd-1f1f0.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash18975f325c25372afa384a185757439f 96996bd89bcf0d5d2796b2f1e97efadeae8f41fe 87aabc4e577b428e3aac571755de7b683f7f91cbd4ff86e86f48fe21e0e7c588
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1fd-1f1f0.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3170
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-c62"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M1RGLCfv4C5RvtxpBPNCoIi%2FDfbMhQ6%2BmlnG5Gc0260OCKbJHhLTRD7nap4351usY5J%2B1buXHvVnkUAYw9RP01aH3D9o%2FN8nZsEstycopg3GTaG8ZC8vwgy7pXfagvozgCANn7Xz7g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d00a0c0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1f5.png | 188.114.97.1 | 200 OK | 2.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1f5.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash830a7d87b4280a26194759a60c7a807f b1a1fd8fcc2e5c0f6eb131a49a9d7c4a3ce13ae1 ecd6bc6cae88ccb1d89d5003912fb3d8270a73220c935b8c39284f1809f9b2aa
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f3-1f1f5.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2523
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-9db"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5kW5UWRNk5mJixBMJ5Ht5XX3YIUNzzK0d2LhsN%2B%2FkCtYJCFprVmrZbwFLUnRFbWgsTXsF7mdUpiX9Tw2zAOSnLhV8gRthgOluqEeeSbx2WG352CYCp1XqRM9TSOecT2CFf76ci1QLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d00a050b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1fc.png | 188.114.97.1 | 200 OK | 2.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1fc.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashfddcdcd8599167a10fdec3ca0f7dce4a 2b5d6c2e8befc241dddc38f41ec518a0c7b46e17 59f2cfc9f3a24e81e13bd175847328039e9f0f8fc2f6f73b12ed937d62ecb35d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f0-1f1fc.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2908
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b5c"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v42t%2BdkBJWCZ13MTKxVTRnexojRRkwdmCe%2B25c3ePrQsHBSUfs11BQVrI0FAM8qjgaim2%2FSAqi1jvmkQv%2BE0re%2BMhqlSWjfsu22xoPv7BGKOQN6aLsxoBvH%2BpltRKDjM6mn9Dstffg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d00a0e0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1fb.png | 188.114.97.1 | 200 OK | 3.1 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1fb.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash19ed633943ec8d62743bb004a74c6bf9 fb4c2008b8318934f7586c5bdf790ae01466a809 8ac82449464e082317c7cc5961ee6c3ff608afae4ae2ef0c0178ba17cc0dd46c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f1-1f1fb.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3102
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-c1e"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H4D1J5XTKs1NVhs0YoE47epfxutQc9tq1CLqtUENLXl8wd2v%2BbzJHMRSKCOy6Ukz3FrRuMDYLRnPYcFNorY3l3B9rnMHciIa%2BEH4eH61R0XJQIQDns8i7YI0aXiHDuV%2FuE0m1e%2BMog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d00a120b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1e7.png | 188.114.97.1 | 200 OK | 3.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1e7.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash87ef9ce1e577c20329e75dc433902e1e c0e7e7e8c387f7e15b924a47efdb1cc2ab27ab02 57828189e51d272b515daa3a050406fcd8525b66015a08e4cff94821bbbbf44a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f1-1f1e7.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3624
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-e28"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WJX0aYehzBvHDLGa6stB53KMiOkR92gKsbsC%2F%2Bt893RgHyMa2zvW2jDvf6G6M2NDE66%2F%2BUZ8FiPbR0PmLNoczAwaNtwespKzGFKIwshk9DCfeTXAyWzQ8HM5dXVtQbr6GA9lIWTdyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d00a130b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1f8.png | 188.114.97.1 | 200 OK | 3.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1f8.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashcbcc9fe9409910ffe43ac7eb38cb59e3 d5725925ced4fb43a12546a932465117decbabaf 44288ba5fc813d884c1c0ba23ae04df43f40c73846edf1a9a6d952c33576061e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f1-1f1f8.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3358
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-d1e"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZWpDEBYdlK9z5nJ3az0k1JeRKL2TuKTyIugWUb2u8InCKqQpNJD43ObYoBLg59A6ghvJLzcs%2FNU5%2B%2BLNixzznmQJBeMdGPmaYS3VcKZ00A3xbTt0E%2BgS%2Fg8zOxwyKpEECn1AaBsWMw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d00a140b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1f7.png | 188.114.97.1 | 200 OK | 3.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1f7.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash5f964bedc6ac2a5c8741b8dfa16843be 24669c785cb0f8e546790c23a0fc42edb59b23a7 aa3adb2f40bf1ad8dd1151f80f12e001153eaddd6f818bd08c7acfb2f0bda719
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f3-1f1f7.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3252
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-cb4"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HmjnZIMsCte3BSdO9VlcsJl5%2B%2BMOQD3RRnmeZWFzcx%2Bog8xRrCfzWPeqXxiY2R9a219ZdB4kV%2Bk71m%2BbU2sj76zkvqIxE7E%2FDzCPtYeQssfx9xkcpXVH%2BkpOP0mSozGfHhfHY8rzYA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d00a030b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1f7.png | 188.114.97.1 | 200 OK | 5.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1f7.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashf337f86a0ce477de9923a1bbd465aea4 5be86c1bfc5dbcb67a1ffc0e2d0c8d1eaa77c6fd 05b5dada8489e4c79f1822d8e4af950692d9dfbd00da019ab45003a13badf328
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f1-1f1f7.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 5221
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-1465"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R9%2BjxQ7zzCG3uGbEjCfBVY9hLyDMXu4TPQtShVaK11FBx8n9OlVGMCOodGsHAa6Wkj4SCESrXjXHA7iTqe7blFMlBngzCFVJI%2FtFxBxYP5Gif8vVCe%2BE0s21wusPfcTx%2BJnm7HH4Sw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d00a150b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1e8.png | 188.114.97.1 | 200 OK | 3.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1e8.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashc36ac5b9fd6c7e19ea3b2be263031f55 7ec0e8228f6f1ed41c7e300ca6a047e279044444 fb028dd0c412305a54b5b2a7ff9544f38973872b57ed17a63f7bc684ece8e210
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f3-1f1e8.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3846
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-f06"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qViS1Gv260WJ4ppI8j2pIcfwuA1jLgbvbONLQkVS78RvGUa%2FD5BXCFKNH0fcqPXbwNITK9ZFGStYzi9iwyiJlIMOguoSwW6Bq%2BFxUQemFdQmY7EwjGRnO7YuF7v9lS7qSPLAVQHCtA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d00a180b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1ea.png | 188.114.97.1 | 200 OK | 3.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1ea.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashffd43c9d67d31bc57b814eb509a37a80 3737bb46dd07b4ec331bcf647b25d2dc04a556cf 80ddc8c5f58a6138d4bc4260b45db9270bc9136bd83e4a2ab3ff78b10f15cd7b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f3-1f1ea.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3296
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-ce0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UoC3CvuMvqMi%2Fd5FFiNcAjopCPk1%2F%2Fnk7fEa4aeRz70MXGcqNgECvQNXabQXd9XLe5lpiB7JtqwF0a1a3exbN3frRsqU8RgMdGf%2BfS7lwwB4K7O3N8v1q6FC0mdG85hMQN249Ll7ZA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a610b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1fa.png | 188.114.97.1 | 200 OK | 4.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1fa.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashc33bff8e061a9752985e4197ca85e09d 246abb627385ffc26b11c8f5d99f795c77381689 4527ede3a1a47dc957113325eed709fb586616db29c22ca9b4c195974d1dc1cd
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f3-1f1fa.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 4043
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-fcb"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jbspsV909XJD9400QuNpG9RP8oTCN%2BLunBWSqwBBlaB%2BWqlKxkJzil%2B%2BUsxUwLkU8evSTx4DWI17bo6xG26XgjlGWrMsQ2qehe71azEq4Gr0yD92Zt2F99fteZ1dmtx58sqZLqmd1w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a630b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1ec.png | 188.114.97.1 | 200 OK | 2.1 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1ec.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash8cb7b88c06f9beacc5a495b5faaff911 28def383169ab6b184298c970c7ae77cd6a8b0c3 ac9be78ce1941c2a37e357a2220181dbe994b96068f78308660ac7aa7d2cf0c6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f3-1f1ec.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2096
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-830"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JdOYQYtMQL4HuVCqcQfkfqNlDX49PoUKayt9oSpd4MHp8rHRzRpGJh8aEys2IcSZ7dUlS1qyv6pMNf3STYB7YRzGxZVP9Rppz2OXH9iNeBesKClVplPltcQoGN46JXYuRYj2Ny481w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a620b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1eb.png | 188.114.97.1 | 200 OK | 3.1 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1eb.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashbb0f56a5c6226bc3beb5cbe7fffc8e9f 89b8937d2d916665d71450c6a4095dfbd6ef2a44 3be69dcdb5572ccc6d7148478ef8d9b96922f2efb7c803db96464addc7a24bed
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f3-1f1eb.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3060
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-bf4"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hjHag4FHjY3EC6B3lcXPrqkCWi%2BbLmLbeSQKM0TP9sCVdSuZEI7%2FJZs2%2Fmmz1sGlXi8DJ8tIukri5%2FIVSaU1%2FrmuJqnXkzpK%2FvLJKSzpJQOHrYPqqLnRp6dn%2BD3JYWKIGQQ2Jb41aA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a650b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1f5.png | 188.114.97.1 | 200 OK | 4.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1f5.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash9e72c165e2e4410ab8f0c4a82e0b4310 143d53558a6d85efd27fea7a9bf5fac0473e18b2 8b2a87ce84b4f87cd84eb3ae2c01e9e3cc18224e6911945e33056a43c13af01c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1f5.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 4171
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-104b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EdS9zuUBRoW9AxWVp0GzzRdNdumYRFJbWjvnjNHnRWYZf3a%2BHryS9PVbW%2B1EyhjfJwq3CaN6iQtohw0vv9RIbQvAIys3OjVdp8AvRu5eArS%2FYyRDq%2FFRsGJKNKBGVb1s0lWtHPE34g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a690b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1f0.png | 188.114.97.1 | 200 OK | 2.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1f0.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashb5289bdc10f7259218ad613f5ed9b62e 7d646fd95d28bffdeb43bfcb7a2b9db3d0df4bcd 5467d515c5e0e0c3a8b3dc751ee04f9f1c411b187061f96078c6aee3632193c9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f5-1f1f0.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2688
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-a80"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yVu4U38ljXXrBqzn7WMLI%2FHRZrxUEb%2F2sAk4L%2FUTbR904IBX2LoEqFHfR76J8U1GCzy00cB5RfoXLgFrbVRflG5HHAQfpWCRmnPjSJN5z04lXdZ0iJseezn%2Bdjs1gS5NyjQk1iHTZw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a6e0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f4-1f1f2.png | 188.114.97.1 | 200 OK | 2.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f4-1f1f2.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashb8674e952648047ed8e2d013189e83e3 578ad342a74049ebd795d4fcb4ed0a57dfc1c1f4 106331007e7715bbc41c04c08b1b8d3025d8fe390ddae269f4f5db9f8174fce9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f4-1f1f2.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2851
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b23"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1eQg8s4qSActXW5xz7oSP20qGfetScoVJZ8kgAKe4r4xrjhdDF8DnGt6H0Y2mGLbJep5RUgK58dGA%2Fc3B8SyBid42cbCrqnRHgSXL%2FZsy25rCV6Rh1kzIPLIuudQMMAjvfzJ2G%2F68A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a6c0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1f5.png | 188.114.97.1 | 200 OK | 3.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1f5.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash02820a1f15f9a513c714411952906078 8add518c893518ef5f1415e179d7b093e1a41829 1996ee3649c9cf1ed763e715f53e6b000ed095b50f6cc468c315b232baef9a2b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f0-1f1f5.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3731
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-e93"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mmJLQN4wjzcmM0uaO9TbaI5mS8LRL3bWh3%2FEkROYjTr5mOk26AJ6H1sahudUDJBN0Xt1Pc6tRV2xZkFmHgdZSGKR3QvZdL6SYGDriOQVNo4Ab7Peg8kBc2CICY5U4gGueQc8kyJHig%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a670b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1ec.png | 188.114.97.1 | 200 OK | 3.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1ec.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash5ddc9906f2d97769dca96b2884cbfddf bba958eaaac63515574fb866d728daff1b2381df 359193665748e8e4d037f44312c2d99110ac69f7622f661c29d6ef0627384f97
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f5-1f1ec.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3348
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-d14"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jAHXrtTJ7dWe9PgfZkhM3YBHMqQ%2Bl9Ac%2FoWqgc6gcpT%2F4Ry1y%2FCkbvZA0GsyBvQrc0XFYSIT7V3Jbf%2Fu3I5fzUAwiKSM%2FdaCU5elA31VDEnevg5DTrrkLjasOZFhKEh2qi9Z1pY%2Ftg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a750b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1fe.png | 188.114.97.1 | 200 OK | 3.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1fe.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashb93df4cc4fe2ae0f89c4ab731ac722ae a7496b534a475cb06890e0d3a77ddbfd745a00a6 648e5c4952c03fbcef638f4379255b2151bd3b1af774cff86265216a83707404
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f5-1f1fe.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3394
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-d42"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nCv236rpog3owNyL2l51YxjO%2BKK0GgzndKgE2Cp5M%2FNoxmrxZipO0knKKKKNVXHU6QLdYeDxLDaBQJn9yqeaiKg%2FvQoH3M9uPfGXubpNfVhkctUQMleZP6jUkLxme0zQZFRVEV%2FqVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a770b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f6-1f1e6.png | 188.114.97.1 | 200 OK | 2.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f6-1f1e6.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashf3d57604cadb5fea013d2b9c96c84709 58809cd94cc0e4606a5745a8e82be557d4ba8d43 2a1730d9c3912300d2684ebdcbcb0541ea5694848712afc6112f1a8d0d04e77f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f6-1f1e6.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2560
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-a00"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=htUQFyyQZF902lMXmJXjCoKoUBUUsebWeBniBgcWyqfD12ozaK8ALFTs2c0eX6EhZCP0yc3zc6JmBApwtL8uaIvuEe3HIx4r4vhEZJc24UKkb0zOU5Nyi%2Bi%2BB3saD2e4DEW6ASJWSA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a800b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1f4.png | 188.114.97.1 | 200 OK | 3.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1f4.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashd18085bbe4c19441c0c54c8acbdec191 b3e531af23206c6cf56f8d5e6f30cb400603e265 d89bc2e455eeb12c0a8c102f7da04df4d77fc23f55af48f0efe9c7ed09f16666
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f3-1f1f4.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3939
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-f63"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FvqwIJIGG3rhre%2BhwXcITuEWAr0M0LZpI9GKzR1pP5QBLU%2FjSbmED7Bkd%2F%2FatI1am2%2B7wDHXBfnr6Fuv%2B8Q9ASIjVAck6T%2FHiZfRaf%2F6%2BOc62OCVI1NJZxcckmJ4WV9dZz6Wpe0z2w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a6b0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1f9.png | 188.114.97.1 | 200 OK | 3.1 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1f9.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashac9baba92f4364b170008af597811b09 e142259b2183558ec4241af38d6fd661cec31c6f 42d17c6e785b5e4b4e777718e37e7281759dc584c464a210698422fdc9c340bc
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f5-1f1f9.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3064
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-bf8"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vpYHoaXN3%2FnOJmB6I0VOdfYp2CuRRtmbvvN6ccYi5omvYndrrKLrjpcwiSqLispfqR1RAFOVhJMTDnPUvND13tN%2FDa4nmI8TSfg7AhFeFAkwxmpDaSgkA2935JHvdqaGn24kXlV4QA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a7b0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1f1.png | 188.114.97.1 | 200 OK | 2.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1f1.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hasha6614f594ba2013a57567dd87ca06c87 d9574e411879c082e0dc21dfc7d2b1ee7f54e1a4 da0ad03aa2ee1b15988ded0410211ed540b555effd1b1d6a97592277a5ca247b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f5-1f1f1.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2310
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-906"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JtNs4fs0KTXyadw9OLzxYuhpF4lPplUbavn5fa1dtVKzxFjpxPA%2FU390XahgBfrPXrwjO1PU8ui0n2ycRY0N0ihosgjegaoJpofyrEeAtzyP1BUzaDKv2vKv4a2tr%2FNyfUf0nnGXbg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a7a0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1f9.png | 188.114.97.1 | 200 OK | 3.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1f9.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashab9747dfd843784d5e47aeb8934eedb1 b2cc34606b35193cffc8f2f28aab523d4d88130d 4421e395ccf9d3354883aef350c2167939b00d109d96edc484559adeae30ad0e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f8-1f1f9.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3573
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-df5"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=byH2jbksFUNtJFvaG59KzvRZbVYbS%2Fnk8JErPmM7ppyBKPD0eQfS3jLVCed8evMyxBNKj%2BaU6dOhHEK32lpMr35%2B%2B0zJse5ix7RdTFjiw3YSkGj4jPjKCHN4W1OftB%2FMHqOcmzX1%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a910b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1f3.png | 188.114.97.1 | 200 OK | 2.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1f3.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash917e81cbf2d40d690cc527703ef44149 fee4ad00cb4322b51b22d869fde6e9e1329a134f ea22485195bf85c6af3458f01c09a5c8f417a60f6cf3a71fac7d82c9ede53a29
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f8-1f1f3.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2539
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-9eb"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jiWEiZgWA7frPF9dNbFyGHqy6LAjh7ErItmcgtO20sn4Eq%2BvDTsuMnpre7LTQ6Hzt0FQaMTBWXz0yMsZdSb9Gg06m5yKZBsgUGV1RZ3lP4k6wjy59aMEewiOsrNiiJh63Wc4JKJ8kA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a940b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f7-1f1f4.png | 188.114.97.1 | 200 OK | 2.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f7-1f1f4.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashc9a6b400b5bb41b4a9b2be9c4ed4b255 ffb60310c4c74d177ac2202ceebb571272454849 98a19cd80a2ca3c18b806bb392712d6b33dc2ffca7fece1a3d2fd8cf2590ad35
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f7-1f1f4.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2168
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-878"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FxoRBln8%2B9LN2AzmIVR2Y4dh81B27dfP3hB1q3%2FkutTeaHMG8m6jc4%2FixsnHidDviIZ0Ms4RDluDtQSqxvAtwekhE2DgGaWAbcMIlme9x6UvHSN6KfjYQDlafxrHJ6YCv2zBPwi9rg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a840b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1f1.png | 188.114.97.1 | 200 OK | 3.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1f1.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash24781bb55f09a85caf6d61343c53c7b6 9e0a1e3e04589b743b262d342168d001abcbb48a b61dff537e05d70fe851fbbe99c55e04fc3a72253faf90a5f16028cd816fa17d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f8-1f1f1.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3014
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-bc6"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fcD4oII4l1jPcAYqgEcurWXGTqoNQXMFGoNuIqUn3wlzvQ7xVobDTPwTUlFccFcdB4IFtpCyHvKl3Pyf9KGEqJVUyg2yqQq%2FZxct%2BrVAVW3b7ZfmIISDxmyoA2VnHYe8nBuI0VOLJg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a980b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1fd.png | 188.114.97.1 | 200 OK | 3.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1fd.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashb3cf685dea0c175477a848c668cda9c7 7dab54dd21c5a2f3665aa8a30e60919813e8423d bef1a3b66236d2d525f423337edf65efc71f34663149a003d6c9d415167f41bf
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f8-1f1fd.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3338
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-d0a"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QxvOhrDXz3s5RsYbs0t3vGdeYPQvXG2HX6JrzLwRF%2FaemivIVbSPWFqKskLSzU0%2F%2BW0bxYAQ5IJLy4vwB50dTxPREHGsZr9z78x%2BiKNNWfyBGGYFX5IW4iMjFezXkhS3d9mznSdINA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a9b0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1ee.png | 188.114.97.1 | 200 OK | 3.1 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1ee.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashd68933b3c1244d4a01456713e610a739 88d76376cba3ccc17fe4c52566a440c00c005f07 f3a0acd79636ca4cbf089866f3f2748cd88f01c7f27d0611b725f5d89b2655a3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f8-1f1ee.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3133
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-c3d"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zetd5JZy3BA80AKHwYnZNoFyQ0IpFZO6EqFxDTliOrDxtPIKgX3uwplTyozKw%2F32hvuFWt4mYvW3fuoOEQbCNcG2ko76ML5IBwKHw3BuskBf4CNhoJM0UXgk5Zxg4clIj43jmwNNCw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a9f0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1e7.png | 188.114.97.1 | 200 OK | 3.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1e7.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashc0ac0567182a7d0fcbd3d34bc2e5e719 03131c38e794b0d28da72c0fc3dcc8643790f4d8 0f4b12c2c1b9a40676ed9c815e39e47ad93e30e055d6d9ad3084c9809ed9ea21
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f8-1f1e7.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3801
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-ed9"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I6RMBAhgPyF6RLNcFJlWu9ryRCveKJjMSV3X3sZmZOStuOzTdWBPo7MEmnCqYlN7jK%2BD%2B4D2mn66Rk0xYS4C2JCg7mhr6Sxfa7y24WSe3F1jovghztXEs421YRhxLTALjLhw%2FlOP6w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04aa30b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1e6.png | 188.114.97.1 | 200 OK | 3.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1e6.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash946331e08d8422ad1fc1fd101c28d775 77f7c86f3d8c658ce72f3f71b3bf805a891dcf7f f0ba0008e91a7bfb16aed8a377338c6178f4d91b00e385a264280dce785a5b48
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f8-1f1e6.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3372
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-d2c"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2L8UAreCDmND%2Ba9fN3MmJUGEagLM8Ik%2Fguiay6OhFVTJp62delx4OZybHKwX5pk3k5XqhYSdq%2B0wSXGWpdi4MAT7XCNk3b0kpHfiwD9ICncmYqWhC0dwL%2BLvlqpe5QDL9%2FAxAXyPNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a920b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1f8.png | 188.114.97.1 | 200 OK | 3.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1f8.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash5368f168274a7b1037fc2c45ba1b6f92 e7b78991207440298ff49d9481499f0aa740afe3 5229aa7adb34ed2afd36891d88d18e0c7f603a8b4af4aa867f2c4520dac479ab
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f8-1f1f8.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3591
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-e07"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bgk38ewQybLd4d54aErfKeQMmCjwqThORN%2BGbej4I%2FR04GFolAsTeM0jOTN0wNzsS%2FL2Mc%2FqIFNhFcYseBha6Kq5BK0T3WNm%2FMV%2FMRfdJScsPAPAK2VocPvbcZlMjGvooto9KDg2dg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04aa90b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1f7.png | 188.114.97.1 | 200 OK | 3.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1f7.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash360a5c47ffecfc88d9fd65017e057447 2ddcf9377e9c84b872a36b3f14dfee86f099df0f 6a13fa4bf85c96f941cb438bd990543ad051d32870f78e707710586d72eb606f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f0-1f1f7.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3557
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-de5"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sKa%2Fjh1nOXCm%2FKGLIGfuv4ArbS2XsaTMg5mSpAxXbq7coRwfYbK9Is4M0jx53i48lQ0pPmmR3M9BPN5yYpYfZ0Iel3ujxHaPlvzYDXm6OD%2BbACOikN7veXRF0JCuWVgsmwBzTIYE2w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04aa80b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1ec.png | 188.114.97.1 | 200 OK | 2.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1ec.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashd0ed1206ed417fa88ca6920f2b3b2e68 be211a8bf57255cc3717349a90d199271850dd6c c15ad2f1c3ed9859b4011fc8e2a08933c49f79467312470372391a05ad40fbba
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f8-1f1ec.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2897
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b51"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3NGUnCKF4F751uaeCBmU3FoRATNUNJOKqI788Adl4JnyEY4JSFof2cS7AyE%2BKMxJqsDqqsBMg3WAuVJOh91WZTAwqKaggTp5ASMs58qrFrj2%2FP%2BCuMyuXs1YKxYGI5qAJ7YVULX7eA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a9a0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1ef.png | 188.114.97.1 | 200 OK | 3.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1ef.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash5debe7739392a701b87c71adb761d3c7 0265db494157f38b9217d11a2e89ab2353ce080f bd7b517c05c586dd6f240d480b788fef465f656a48e56fc5064e9b3438d7bdd4
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f9-1f1ef.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3351
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-d17"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ksko6VVN0U%2FOmCkPtHFun8ordtHoUjykb347usVC6rgz2HSz6dxqjou77eYHLWk47D919efCyHHicqJz9%2F5fCwtDC98w7K9%2FX5EyOmYSEp5fb9HU9sARSiTpEcDoI4Up5UA6z1SfVw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04ab20b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1f7.png | 188.114.97.1 | 200 OK | 3.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1f7.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashb4ee26abdd61a47d2703b0fb51eefaf4 1a36af95891fed5352e67a1782f118e64ad05f1b 9f27bbf0c694fd3cdecb93b5920af78608c6e7c97e52bc5c11353720b61d3579
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f9-1f1f7.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3038
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-bde"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JyrSsp9D5FEwAw6wMP0hbfprJwuOYs6khR8Q4Cz%2FSd8ikvCFDifltXFEpoMMPt4Q9lawaVagdaPkVscApoHAms9m9v6B1FZfPV8R8Zxbje5lO4Nfpxy%2FIswvUx7j1qiE7iN9PIpGIA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04abe0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1f0.png | 188.114.97.1 | 200 OK | 3.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1f0.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash0c8f9bed125c843b1efa1ad7b8f40cf6 b82f28949bc2ff5659892d9743ee3163074fbe59 405079b7259e0226754fd321194f1ba0e0915ea5e6ba369c1b51e861dc802186
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f9-1f1f0.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3275
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-ccb"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xVVdJzGrInXebUjc56S3WFytEqHe2koUYVcvHNTK%2FH%2Fr4JDej%2B7TLWZjXubAelFYq13YwWZ2kbzDcVEo2AL8WwBzH%2FnhHhgmVckducCtqXJYf2ZnEd8JaOdGtG4mCWIWiDw6My8vEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04ab70b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1f9.png | 188.114.97.1 | 200 OK | 3.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1f9.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash3c8f2127eacead7787ac1b69a9175804 1176f0d04b4efa4de8a2710f97b1fc8b41ef7117 a2dfad9096daaddd8c7d12910ae31d005e62ac16d4ec2f0a86805cb19c4f8fbd
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f9-1f1f9.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3541
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-dd5"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1rW8VVaTyiRjmvh2zfANXZdVpjU6ott42aoomiDNu1LOIPQXOdQKjNUv8tV2XdHjjEM9ue2Jk%2FlqoCNCfmo2Y0vr9xcy0qYthnSPS2Qgk1oIgkvnZMfW%2BZAc%2FiIhNYIMx22SZNouog%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04abc0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1fa-1f1ec.png | 188.114.97.1 | 200 OK | 4.1 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1fa-1f1ec.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashcc084dea993eaf9ecb461f90730f9324 e11950d7d85589d6f9fb8d660be9026ae56c15d2 40e8cf9d53ee9efb661fb858ef979806cce17bcb7813995c3b84d3b22d0e70c0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1fa-1f1ec.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 4062
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-fde"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hAIlGopdSSgQAsShqUjp6KSy7jQpjzmhSJ9dtN1WizDmBVvC%2FgWNLYvoLoEiOOeXxNF8sAuVt%2B16QKtroKViElo79b%2FpdnHyr1wyCxxahRpgbVpo83OBGAEz%2FQ43x%2FPeb9kcn3HGyA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d08ae80b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1ea.png | 188.114.97.1 | 200 OK | 2.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1ea.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashe0c12f728a73cca2f698485e4e059cc1 47ae974ed1992a1339285cbcfc8114e7f09e7b91 5114cd7bdbb94b9e206e831298880ba910595bbea9e55f5d3e67b2322705bf3c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e6-1f1ea.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2497
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-9c1"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oyfOjBGTWZenx0gqu30DiO%2Bld6xv6Av6YQscWH9348l9gJM7Wjq%2F%2FayqffrVwsz6TkL5pp27vEgdy9tc58MPWSQuXsfnVgyPoedKXblyp9qk%2F3PpaA428ShpOmB2RKmSQPTj2vg06w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d08aea0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1e7.png | 188.114.97.1 | 200 OK | 5.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ec-1f1e7.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash57afa6d452145cbef5a10ca5f1ca2541 03ac224e1f43747d3cec10d90f789d3e4da1b242 160e2c40f9f3223eddbf0b6767e79bc05c6af362f2c05293501fc5ebb5f32fd8
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ec-1f1e7.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 5508
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-1584"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J0tc1znbXhjErwj7iJQxavWugPSokv2N0C652HQHjoBnUCWu9FeXodgmYKIj%2BwkvOdQ1e79w6dmHRpzANrgJUlZXV0rssyXq14MlSrbksbW6ojM%2F3ibGA%2FcbMbqRjb3CHn3FqCt0YA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d08aec0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1f3.png | 188.114.97.1 | 200 OK | 2.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1f3.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash5291bc51217f1cf72f1777e9b7e7957d 66be7edde5b7404ed6ef2e344200101ae6958637 37a27033c61006f5c15df1d490f8eaf56d0adcc3e6c894fda73b147cd6140813
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1f3.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2811
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-afb"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FwkR8OHzA11RD5rzL3Tg0kiHc1DVv7U9fTFNQxNwitpBPB2BibsYC7TBFnygdYzwJCVYa7CgUe0K4ew2vx2uCi1RySjPbTDHJZVTGn52Bf54yKIgGh88hTMqnnOB%2FbfzLZ5urZP0Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cfb97c0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1ea.png | 188.114.97.1 | 200 OK | 2.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1ea.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashc412f52c4a8495b0d2d098b123518770 a3cd4e20d94108aeef2addab7e972ab67f8fc794 5d6c3a91391d74eea9c7e954a43ad763b8edda8cba3a5efcfc5141cae38a6fd8
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1ea.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2852
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b24"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m%2F3nmJ%2BcEqIt%2BUv%2B1qq7q18%2F%2BkoL%2BV7CdG4UZEvlkjXfYp20K64e9IFQtpjmQjZfBYrzkkf6qYxl8sfCPwEZ%2BtKmX5yCpkejnJTX%2Fg4RDJ%2FKz%2ByVuuCBJYrTqZ1riA8F%2Bjdpn4Llww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cfb97d0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1e8.png | 188.114.97.1 | 200 OK | 2.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1e8.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hasha7ac8926224c2f5b7b33d6386c27f06b dda21067099f89d797e8c0cfbce1e2c2eb51222f 672c063e2abbfcfd87100751aa8fb2b418dbd876710a91ce4438e3819dccc703
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1e8.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2426
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-97a"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QvHssfi8ISpk9oD6W%2Fppqg%2BB5hez4FnCiWxggSHT3xjhbrEeAgD1KNezSc%2FOexOlewW9S8byS1Lwiv5OToI7D7369mFWADcBDfaXEb5z4h8fdSt8l14mos5QYcfKcSMAL5upA1f9rA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cfb97a0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1fb-1f1fa.png | 188.114.97.1 | 200 OK | 4.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1fb-1f1fa.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashf48bd1e4f7569895f1143ac5801305ba 7e7a23e748dd100243d13e93ad36fa5039223885 782145d4243a4aedc3061c6accb79057b3a0477738ed0c35d43269a41f35675d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1fb-1f1fa.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 4037
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-fc5"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EIiSDDPlTLyBvU%2FX%2FFddLMqnvkqWo7LLdm15%2Fg2bnYS7Ix3JB9TtBBHhV0VHNEff8QR6f%2Fh4lzgzw9gqOc1oWOb9kT3%2BZadEKbqWL5PGvaEF6qS7tkX2ETQBemetz1TgRGEPsrAB4g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d11b8e0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1fa-1f1ff.png | 188.114.97.1 | 200 OK | 3.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1fa-1f1ff.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash164efdb4213509de3d4a01219a980cfb 4a6289c1295968a7389883436ae1d23b26a736e6 e89e66b7c26f732c28c6ed24f4c010914dfe881845a64f7ab7432f9fdfabd0d5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1fa-1f1ff.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3602
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-e12"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kF4Z5pfkXT4yf1m01xxm9NrIRsM5%2BhCzRH4wKVjwkoN%2BvykVfVEUvrjxcO85guai7rtsmePOTAQ2SBxQizzDF939C0N5aKaxvFinOtlU3gKck0fttK%2F1ya4Ug5PDKr5qqZrZUIepvg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d11b8b0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1fb-1f1ee.png | 188.114.97.1 | 200 OK | 5.1 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1fb-1f1ee.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash188cae4cc09f69ec6849639fb1ad20e8 576e55ec6a23a49d6538b43ecc95d8ba4d92ed92 5889f2cece25d499e82ab3e7fb01b36eda0d6542ed966bce3b8bb49cacb6251b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1fb-1f1ee.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 5110
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-13f6"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vrPOnV49oIj5YovAMvzdZ072rL4tHNByPIN4jqiru0SfxrfDzeeDiQhpU6oFtR47HFbVd8UrCYIKCfbESyneXy9QX8jqRvx4Q42fTDhJpb7tCCKRyV4MjsGzb2MHHxeb79HPwcXFEQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d11b880b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1f1.png | 188.114.97.1 | 200 OK | 3.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1f1.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash579714dbaa25937e24c29c3a323187e1 058a0aa0b3a742ca23f51d6b57e06e35e4f88cff c51fd5a7bc1b210750acd9b6de12c15d6cd8d918714098865a0ddbdd2a38369d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f3-1f1f1.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3038
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-bde"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lge%2BSyEbzx6%2FiI%2FolpfyXxxTdotZcghFRfoSqlpnAJZ44PwWX1ywZfkECYmgip2XtMxciegimbqJBeWh2oO44bzM1VTJXdcR6poB6N2y6722zMitf%2FHSrutdcktfz4TQKSjC8UsnOA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d00a080b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1f2.png | 188.114.97.1 | 200 OK | 3.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1f2.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashce5e215974f232338ca8f934dd8cb55d bbae3ce74c4873e9984cb65a8cf0001fde6a6a80 a9c869616f9757263cc212beb64dc3c3e6f3be069d4c3e0fffd5c1e53d26f9dd
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1f2.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3511
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-db7"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sawPM25%2FuuopWlZvZiUoSUG5WM2FH5uNoeKfxd2GMF%2FABCgJC4WMVMkWA5HyWA97y3oGdcDny3TFPTuejqNninQkxJpcsxb515Nrp0hi16ZBx0%2FmpTsBaPrZIJYa2JS4fffA39T5Ew%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d00a000b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1e6.png | 188.114.97.1 | 200 OK | 2.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1e6.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash8d1d87357bd233a202f05174f7396948 b7536bae016fd43783b0d138623d546d65a46c33 51ca6ec9559cec9f21f0875712404f3e9be33412ac66f7a7604638f9f024389c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1e6.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2803
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-af3"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hELGgBJ98eDRxKzGLna%2BVdVyprbuYlVUKQ%2F4vm78KFVWFf2Ete7gEF0cyCyDQ9GnE5CL3x25h6cCk0rguvfqFZh2nMxATAMLw4xNoaO1pVctscFR%2F0QOREqcnhHmAotlyiiTwaHmEA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d009fa0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1ff.png | 188.114.97.1 | 200 OK | 4.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1ff.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash78d5c803e5264e79336e2bf8eb756ef8 735f521cf64b6e8ac6e67271a4af4a3bce6e8b05 93336f0452b71304f679a435ddc99a93b67c6c6cc0ced41d50c22dc20295ea68
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1ff.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3957
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-f75"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tnDm%2FZwDLa4l4UJIDS2KqtkpsgGU2lZt9K75n4owC6YlQe79eZy9guuBiiTm5o0mfE4s%2BpMsRBt9s0yEV%2BijBIVRIsCDCjfDuQihuBJeety3DHHKkjXqEReM5k4x8s4qmFWRIY3KhA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d009fe0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1e6.png | 188.114.97.1 | 200 OK | 4.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1e6.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash97de6ca0815042be93d4701807b7ee85 e913e7729c4a6687b74ef37a5544ada0da39ad0c 5d5f39b98b317c085cd1937cc5ce062be379270eda1969b6c6018513aac0044c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f3-1f1e6.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 4329
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-10e9"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KYOg7gS18cKp2t3AtTOHqrpsThkjOUVjYGhXexq5LVSOPiGx7fW7GGOf8mNlrnrBc8eb%2BxpzHQy1RI6%2BSnAn1cnSKePlwlL7SAv0e63tfc6KbIa8pllAEO9pidBKrpUrEHErQrpO2Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d00a010b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1fe.png | 188.114.97.1 | 200 OK | 3.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1fe.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash599c142ef3a1762e9c7cebe246a265c1 1cbef34143cd8de8773ec32d891cf552bf28ece1 7b589e6e59d0a5d840d82f33bbea0d3ba3923c349ca5404f465c05cc6f752e6a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f1-1f1fe.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3228
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-c9c"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c84OKgapYHKzF2DlDfoZjI9PLfdc6B6V0gpkhVF%2B02V0QF2rJbdasaACloWw5jj00gqu7IOWUoC6xu5KQRE7a46Z4HJtdr8QIn1JRRPCcPThJPqm01JKuMkf57Xm83VU9tmwF77i%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d00a170b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1ec.png | 188.114.97.1 | 200 OK | 3.1 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1ec.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashd7f2df6ea9db9798d09ac0c846a76e85 d552176d7fb8c1f364f1652b4de77e8a65ebebd5 cbd1f61ea0732e188f21086ef4bf76b904dddf7e277706ac0540b0de673bcb2d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f0-1f1ec.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3136
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-c40"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EcYYKU%2BhEBR7pZt%2FyGWwIUAVzUfYemeCH4fxQuF3jAzKY0H%2F7pLkDZiihkJ8DnBX7dBU9EpyqKuZjY6gGZBeY8B%2FekTrilqKFkhbo%2BYmL6M9xJ3j%2F0jiFa5YufNBsuwfzPshGn6Q6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d00a0f0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1ee.png | 188.114.97.1 | 200 OK | 4.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1ee.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash6e4e289990b3f73bf9a749874de1b014 a68265bbc12e2432f8f5a264c57a528b983c2c46 3867808ca3d376fbe15a6caa2450c2e91b9b2145e6c274461b5268de7472e2aa
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f0-1f1ee.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 4698
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-125a"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BWKEjY8MJjVEaLRfExTIYRMNoyqP7f%2BVv9zrrq14XDMgtCd6ShT3GrLWLilX1zgHJzG8GH2Z0%2FGoM%2Bfor2Wk4XcznVwOjr%2BjXu1oO9N9r%2Fek18t1E69%2Fg8nnrqjgOgk9Y1%2FOJzqsNg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d00a0a0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1e6.png | 188.114.97.1 | 200 OK | 3.1 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1e6.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash836da55fee5fa5316820bb77f53b7cee 6f578acec8b8aae1d66190c4b59251af641513fd 6eef580bf419ba70213132954708b65365375dc64b45e5355da60c8cc4762adb
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f1-1f1e6.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3149
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-c4d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3hgiBxPXEfBDDO74OhsS87J9juZxJB7t8lYgU81M1hRjMjyLs4Krd1fjJ%2FAwLfOZk0JIb6j1XSZ2%2BGW23otT6t4P0tmHSi2ulRHkta4e6k6fpox1gLeX4suyxCSSkLWBgEgqN%2B63xQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d00a100b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1ff.png | 188.114.97.1 | 200 OK | 4.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1ff.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash0452602d2d1d3908b863a0e90349c845 1a917d0bba48d42aa5cd1cd803e0d07a0b4479cf 76fb5a7fe1da630db81d08567c3000bb6111c141e6264afe7a95bc285956c3db
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f3-1f1ff.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3955
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-f73"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dbz1LuR5iKzrmEMsLU9n%2BBQprby3vqMplcbbB6ppH9mmQqgRspzpNTvrf%2BtJnGWsqvwvPIuyUQLryxq%2BJKvOIh1K1M%2Fs0vrRfYMnL5jHwkf5uE73ZUaavtZI%2FDi33OUk%2F%2By9S4xkag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d00a190b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ff-1f1fc.png | 188.114.97.1 | 200 OK | 4.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ff-1f1fc.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash837389b372b016e0f30a44be80cc1bf8 7b832a10c28ea37db1c6d53b315e8988d494d35e 145abdb5413e0493c6dd0aadece335da84a5c73ad94a57fcf7a461728ed11ba5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ff-1f1fc.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 4686
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-124e"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JH2efcgwKRoFwR31qHV0nXq8d0WZwAfcIEvIprLjFhP5ws7jqNpAHagZbaiMGUAjJyDSizpxPLHwBi3m2ehjT4W%2BqtbdN7Ubj3069nx5OsvSIMcfi09PoTbjq1sYphKmNzSx4oCikQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d17c2f0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ff-1f1f2.png | 188.114.97.1 | 200 OK | 2.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ff-1f1f2.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash8372c6d280f93c43f78761cb8a5d89f4 84582e3c49468a21b320fb49f63fb454fbe0da08 d8f00c77828353d8f1b725ddce0b789b7a9147404d7a7d9f15631b8e7db665c0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ff-1f1f2.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2388
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-954"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=774Y4PbyXC7g6bIn0nDYx%2BWNdfHAQhDEWYDOXQQIWBr7iztCqjx6p9j7%2BEX40fCnuAO24nH5hzJPxHDVV8yOn9YoOirA1NiJtvJcwYIQ6Oxl3NZWES9AysJ%2BHuATXY03vTXpQZklRg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d17c2d0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/fonts/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2 | 188.114.97.1 | 200 OK | 11 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/fonts/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2 IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 11056, version 1.0 Hash07db243db21ed0a6b4ff05ff429686b7 5d62925fdd7ed8e80f206d095ed093994f13d276 ce897833ac6e362df7c91ac8223fe511c6defcf33964928a81004600a2dd4c2e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/fonts/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2 HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/index-r_N6u86T.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: font/woff2
content-length: 11056
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-2b30"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BhkB1KxxU4UnTsRHBFpEJ1LZjNQftqR3fTEVdZUu%2BxIegMUo0Ax8qulQwO2bsP46%2Bl%2BkX3zCDuzBrgt%2ByCLmApf9%2Bxiga21%2BMfWRIYmqPqKZlwqze7B5nB6ms9vGWo%2Fx4OIeZDRF5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d17c300b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1ee.png | 188.114.97.1 | 200 OK | 3.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f3-1f1ee.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash7c6f666572c01fe34aab4d035ab9d42b 873fab9c8ed920c9f38689e308781018b17c4225 afc21f9ae5dea61222a797c6f1b999348bd73091909cbcb0b83bb006e4ed1d1c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f3-1f1ee.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3262
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-cbe"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a%2FLQ%2F9z93pCGW%2FAG%2FH3x82QMs83fcL%2BZzkwyBrEmQ3nXmOLRGkN1xKuOEi5T2hzF7gZEd%2FlYUAzEE0BAqNj7HBLmjXrE0MOH36jRlYpbn%2FTvSdEjw7%2FgvXnuDd219sOk3Pp2yYREfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a5f0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1f8.png | 188.114.97.1 | 200 OK | 2.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1f8.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash399e73fac4096ef47012a0d2f51f80b1 e700eeb266c604140e255ad574ed22d076887603 8c15d71bf696d4e90c16e57fbe608a1c2119c1ad613fa3a8157d88eb231b0440
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f5-1f1f8.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2765
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-acd"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rNWWMoqxhCDExyoGx7YOzA37amqYJC9ML2%2BIG58f5rmpTuRC9QrF%2ByhcHvIN4AEebkdeLhkQGqoZsSaaKzfF4lgZEqPbnWnCoFg6kBtxmrVtqdKGEZviffpqDoLeEu1ROvv7JGCrQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a730b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1f0.png | 188.114.97.1 | 200 OK | 4.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f2-1f1f0.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash5696a7399930cc7172ad173f45abcc18 472d95e2cc097401d3a2d8ab3a2ac9b88038757d 9751832ea3d0507504e2dafdf0e09b8e74594f82607ddabde803488ee4a46c91
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f2-1f1f0.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 4508
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-119c"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fiq%2BA6CtUK4KdywF%2B%2BozjkEfwhKJySjHJjmalJwo0IDuazShLvD1l%2FcBp3uWJlZsvLaXMRa732RZfjklQecZMWa0fSLfnXmr9rBekE2EU7y1JKLrdFtsrq9q9K0Jl3ijQ6MjPIoIiw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a680b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1e6.png | 188.114.97.1 | 200 OK | 3.1 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1e6.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash534276dbb1ab6e4bb9277dc57a3344ca dd269a247a0e4e7268bf31708a4d7d23ed683f62 d8136f520952e668df7e754bccbe3b92cddee2cbecd9cb9474f74216a95baeac
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f5-1f1e6.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3089
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-c11"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1PGe3b5BUCpMrS99lqUEHdM1DCh8syBbmSC0%2FNRfyIC5ipJd77wKKuTb5Msy45MlOsH61K0yGh3cGbUuEI9vpAxlYVYjx%2BWZPucPdDuMyGVtT3k9ACbfuTIaf4Kgr9gpAACuai6XnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a740b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1fc.png | 188.114.97.1 | 200 OK | 2.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1fc.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashefb6a891f2cce73a376c7a33ec376233 59fe3e751d5ec7501e22b7694c0d24d4e27b5881 90d24a13ddf9fd81ba665279d16b230645a84a45f0081cba536050b8872d921f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f5-1f1fc.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2796
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-aec"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2uul3ZibDRRsXzX%2Bl83%2FdPl2r%2BZAhnPD2tI5tYfLP8XI21tYFmFnYdLP3V4NBGkm2TgIVX0KoNbAMSV%2BYA%2BNjwp3GyMVIW33GDIfBoBc23V0QiD9Z0SnYk3O7lg1PC9awCCoGZnV2Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a700b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1f7.png | 188.114.97.1 | 200 OK | 4.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1f7.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashd99bdd094e08d55a26bdf55e66557378 aaffab634194b0431470dc034df754987ae665e6 139fbf26293d72d6bb8a8553044d3d38f959fe08f8e9f1266fab436a2b566abf
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f5-1f1f7.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 4152
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-1038"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QIobJeOA9pgNaa4KxkMT61GPLT9IXhi%2BzegOFl7Wuxg9avMdwqBbn8KyAmRwTbvHyU0pIPlRupugYB4EylOe2q6lwfNs4qrYmfJgowS8PV%2FHvqGEe%2FFa%2BB29spCV7tqrFFmflhBF0Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a7e0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f7-1f1ea.png | 188.114.97.1 | 200 OK | 4.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f7-1f1ea.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash3746e0fc382e4efbae1d1ea9004c2f14 41591652de52b704209caf9964ed10d19f122091 c2893b49b1479d58266fdf5d049753f9dbc5d3ec38355019992a752a0aed7ab1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f7-1f1ea.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3995
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-f9b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PYjBA7ud8dE4My%2Farg2okuYEyJL6i6RvE3AVZnMf9FXPkTegucMLNXiapxKhriXbusgrreZ1jElGMpzMVOSPCMt6ZzTUYaLC7rOZ%2F0XAgVooIWxiiAkfmXxKX5UIFkRuLXg7bLbOxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a830b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f7-1f1fc.png | 188.114.97.1 | 200 OK | 3.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f7-1f1fc.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashbe4943ca7ce5d775e36074bbac9de1d7 39eefd69eb2f4f60dab9a8fa3a29c6b0e80e13e2 9c7241a4d010d8121b83deeca8d2d6683525f585baa2f96962691166f4909d2c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f7-1f1fc.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3603
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-e13"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SI3Ftchz3mIIo9IN%2BZdM83NdCRUZipUugk2%2BbpwIQ9xXtjBTE%2F2D1duvePKslV1qGunERPzYkqKpamayWa1FKKCjR3zrP8qFdhFijUzEH3UqsqyT2Qk9YwgcpzkSeWFiz8JkFwPABg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a870b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1ea.png | 188.114.97.1 | 200 OK | 2.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1ea.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash52670566d96a885b6689d42d5a9936da dd2ae0097c75616d685456138a74acb96e4d4d4e c139e1f08441c21bc627b73c0210a9586b2cbb86eae3f185ae8034506099a844
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f5-1f1ea.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2151
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-867"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HnPnXIjxLvyIu8WrtiRcpfSkVVzcUtKZXO7zbBaIsArtX%2B3MunSEUuP541wMV6sCZOdhBqLRJQQzo8SVunsiJhZMQwZXoXsjrV21TyYryrqH1uXCs05kmOg84LyQFk2aZGGkudaOxg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a780b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1e8.png | 188.114.97.1 | 200 OK | 3.1 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1e8.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash4205ced6b4d6106ef3a04b96c6339fad 2e4df8761f9689e0998e15b7866145060b683b69 d0326f19e3dc558000d575fe4dd08503301b9721d9767c7fa0afc321ac905a22
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f1-1f1e8.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3149
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-c4d"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oo4u8XKpEjk6ME9rJn2FIt62Kw%2FCJVdP2IijFkXAw8aPjbaDwtXiebdSsCZoakn8E4wUWgDCddoKNDZkvQ5FJQIWoT66xQWxKHvNiiJt2uliVIqobHgGn8CDzOSPAnmDxh%2BUJ83Rdw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a890b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1f3.png | 188.114.97.1 | 200 OK | 3.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f0-1f1f3.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash481b349c16382897f8ec3d90f50e464d c43f7e02405cb32863dc2538f1676c5edfc475fc 028c24780250589dd83419eb34cb41559862179dc6ed055d87a43b135cebd15e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f0-1f1f3.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3941
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-f65"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nhakm2qrXyb1Ki%2BB4N20WWjHNlq8xKN82SSS2JpK5GhyXc4Svl7Ai0G5IwljELYF7TdNqvnByyY6Ff2iTDVPzFI7VriY5LFXYJ6icK36J9JmlU4eMWX%2FnvBZPod487aBY6vrJ%2BRS9Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a880b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1fb-1f1e8.png | 188.114.97.1 | 200 OK | 2.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1fb-1f1e8.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashcd7b94aa97a62d9103f850dd8e21e8fd ea9809dee740bd7d4dc73f21f8cea27ba3e52584 2870c8544dd305562d31129be8510e74f77170c8a89b37f497bc5f278fcef505
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1fb-1f1e8.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2887
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b47"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d9qXkTitC%2F963szV092eD1Ejh4FyyXKjYnMcY0qKuInHj0xK5YQ%2Fl7G1Jcl9ZOWiNeNbwev1dzlMweqiQjgYtO0It%2F2Hyr9kUShXyC3j35uip%2F9Xhg8z1zdLUCALDe8z4G1dQUtRQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a8c0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1ed.png | 188.114.97.1 | 200 OK | 3.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1ed.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashe599696cb6afa449320e3dcfae10a2c3 0d48a651ba1823d45e6a0d32eb03f60bcb099566 10e97a9c12211237e8f34b85cf98e17fba36cd61c10919c090aab475521ec796
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f5-1f1ed.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3491
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-da3"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rtZb7wcfjgEGtsw%2FY3ngM6DQ%2BnL%2F8iuNzSMtpdd2uzKSltTB2SQZV2OIEDNCwimxBiGeGzJ7EPasqozXC1Jz0aHafzaDbRBkW5npP%2FuswMcDg7tdv8e3c1cATbauwRZFWpi8Dp6mHg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a790b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1f2.png | 188.114.97.1 | 200 OK | 3.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1f2.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash83826af407ce6a00fdeadfe3493015db 530b6ada2530cd62889a331d786cbc745098ded8 27ed12bc03c1c75c7c5565ce4324ad2a4eeecac952afc760216acce3795d2854
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f8-1f1f2.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3383
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-d37"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FxOmgZl34VxoppVcj06QMYX%2B3cIMqYwQmh9vca7aT6A%2F3DjM%2BCt%2BeM5p6eEbkHpbTArPnUNWCpF9iAcH8yfqwGAfPABD5nqpzIcH8LI%2BT6H1firDmPkscfR415rVDmTGyux2DQZaQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a900b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1e8.png | 188.114.97.1 | 200 OK | 3.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1e8.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hasha5c106d022ff9e51671eaf814b809b2c 28a78879782f1e0603b615d312b9d754d1a1ea26 e1eca0196b36387c8f59861a0288caa2476dcdce9d05e35b0fea99e755a87508
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f8-1f1e8.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3649
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-e41"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DqAT%2F89d%2BWD%2B8weXWd00ZFG92rZvhOqndcHZYRKFu9Xnb0%2FJBEKwTT4etXVvkvj%2FDf30JDH7egz9a97MbJ3M8dW%2Ba%2B%2BzgBgrxOxqSwpebhkvLGT4kbCLYj7%2BMZW3o8WjBOW%2BfFvFpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a970b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1fc-1f1f8.png | 188.114.97.1 | 200 OK | 2.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1fc-1f1f8.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash5fc4867b6a81d3662dbbc1e1cc240197 9061a89b1d371fd9dadf880883f809ca32e23721 5582b93230480a7ba99e95270d902d52b9d26eaa1939efceb43d3b61f82b28dc
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1fc-1f1f8.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2689
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-a81"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p2DOboXk1hWfKul0%2BHVwFfgF82uq%2FixGmTIUrlCL1Ri%2BiHkIrvSVbVAAZb3l%2FnE%2BYpk%2BQ0ogJ7%2FevAO33STJsAZEEU4yl9G%2FeeObQTqIH238qS%2BE55fUJokPcTQK4Ajqb8rf8ricbA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a8e0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f7-1f1f8.png | 188.114.97.1 | 200 OK | 3.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f7-1f1f8.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashfe7d68b6b4f721f861c006fe543fd0ca 9207953df1f971b3d12e24e050aef990ebbf0100 1ddfc49a2a54f39bacdeaf2bd5e3f53b93a5a1b7c3f22171dcc8f7e572c32135
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f7-1f1f8.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3742
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-e9e"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QpoIKLs4kdzHrTIPiGSmMFMCPUvqw6URqisObX3iimYW3bBEfHgEGWiS6T%2BBQ%2B0HQqAI9Q3NrSaSWZa6zuC17xBNvKUo244J%2BZ7ZGQC9lo8C6iEIu0WlCy6aS5DLn3kxhAc9aKg1Qg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a950b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f7-1f1fa.png | 188.114.97.1 | 200 OK | 2.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f7-1f1fa.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hasha4577e3849fa67a38df9a5c69d9e6c70 786dba07e408907e82fe57050a80bd559bdb6400 92e9b36461652f6c4087a4120f0d58bd26ac2124872987d2b11cf400c5db1dcc
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f7-1f1fa.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2758
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-ac6"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ithsdXNPPFm4yojlL9PtTfgFa%2Bnc929hI6HY09ply4L%2F%2BAYdI52170v9o6tDhqzHiZG8IWBcjh8TFbhhgv6lDn8rWedLPv5xWIEBrPNt0ybMIcChYxto3SZ%2F9rNMpZkCCYPngr1kBw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a860b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1f2.png | 188.114.97.1 | 200 OK | 5.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f5-1f1f2.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash9b5bd8a93e88af21ead307c00b4196d7 a972142f638c02a420f93a619e2ea96dbca24088 6c219e0794efbd20d50623f329525284ddce3732fc72d71fef562b5b1b3581e3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f5-1f1f2.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 5801
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-16a9"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dcVJC8ni8JQErDsx880TckWfuELCCW8D4Lj8lMs8lpCUND1B0QMhcjLTJweeK1SIQCpJ%2FCcXztxfbS466sogFMr1eic7Du9RyhNLu9XkHMVnpYcueCgvFqpjJP9AorhQH6gxBazIXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a8b0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ea-1f1f8.png | 188.114.97.1 | 200 OK | 3.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ea-1f1f8.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash41a6158d1d3b0b31782dc58b6531aa18 4017ad271f0ef68f50cfce45b5d021a28cd6f9e9 af278e864232e3c2c0798b1c2d34f57996391d9a25bfbae9f80b6cafd134b1d9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ea-1f1f8.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3459
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-d83"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f1aQiG3uucuuOjwZqraq%2FY6LoijW%2BISiDArU2FUnEUQqQZqz9HQ2kvwBL0h2Tp%2FEu6uP15%2FNPVOIm4e%2FhbDDENJ7Kqb2Nn0wBl51A1txWZa5IGZ%2F%2Fd3%2B1EiZeHJUHW1lNxomr8Y3Pw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04aaa0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1f7.png | 188.114.97.1 | 200 OK | 4.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1f7.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash756ac1ece36120cb0e28fb37d66cec7a ee5913aba0411b7f24a99b6bb578c9b75764f0bb a994ce5dec9042aab14ba8347bbb20700b721a2131fb871ad95e69425d09dacc
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f8-1f1f7.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3981
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-f8d"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yXnoNgi1q03jhPAS9aorqQDer8K0j2el4uDEBMpHdkDb5%2FeLEWZsg6uccKzU3S649sAoB4ZQ8W8uyg%2F5B3FrNVJpw%2FpuFDgI4KTKMF8bRxzSJP13mQVDSDdn7bH%2FuyerzIhsMyPkuA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04aad0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1f0.png | 188.114.97.1 | 200 OK | 3.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1f0.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash741a26646208903f3669f9247e125590 80e75915f0829b487e68261d601a421600564086 37e1d4670482b4d0188ca6ab64ce3622bf3cbde054aafcb6a028b6c2e88ec87c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f8-1f1f0.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3444
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-d74"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m6LccOxEywDCjEtGT96oH06EYlntcr2B43C4dTaWqMkIOmRMAh5JcBVyyhJpsNOKsW0kMkMF3V%2FmIytVXBzPCg8Y3ajj9sBwhfz3zn3H%2Bm3TWH4ONUa9R2nn1nZks4ysRL9H63m7XQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04a9d0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1f4.png | 188.114.97.1 | 200 OK | 2.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1f4.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashd3e6cd3f2ec3833c2b19373a20048df8 513a516366690290e4e578b424891261ef1bb98d 67fff1f2204bdf9cc80b2d3fe9130c541f8ef52b2f38943b12d6245fcaf2e8ee
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f8-1f1f4.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2564
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-a04"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OdSH5E4G51rnrRlb1w3z0sZYSzx1EdRNnI6yogDeRWJdhqV5txKtHohxdEw58%2FmSy17Qb%2BZjsOm5DSdAlZL6cFgUWOINmCe5WMdeM4JJSMzCHHYbZ%2BvSyyEO4RUtx%2BYRPiQn2776cQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04aa50b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1ff-1f1e6.png | 188.114.97.1 | 200 OK | 4.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1ff-1f1e6.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash4f8e74a4d6c53c617600fca2abb396b0 f21a792805c059365fa962e3c7b3caa02d23dad2 1f28dd90673608c76e17255f9d15405dc1b655a638ac2b84fb31d17eb39ef20b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1ff-1f1e6.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 4358
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-1106"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kFpg7nB8uM7Q60DSN7lXxXXoI1Ou5ni76GbjOF4SxYSRgZz%2Fz541CkISLAGnTq%2ByL1KvimPbHWP45n7qMafjON6gTOWnb6ldARjvc6iarL%2BR7hvLEVoD9rhsMcyD0Os%2FKG3FD5W3YQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04aa60b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1e9.png | 188.114.97.1 | 200 OK | 2.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1e9.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hasha7d8783c26afb40bf057bf8d601ac15c 0c201bcaa7b61afbbf9e606aa782018192cb92aa 4b9dcba2078f0b73682a408bfad43e4d81414e088ddaeb85ff5b3ff5fafb515d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f8-1f1e9.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2845
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b1d"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lcF6uoUJn2aMzksHk5EdLpITew1KFkkEiGndmmyyF4pTNzplDAFVqBDMdicmye94Q%2FAGFvAU8Lsvey1ajsLmiglGANaBZhdWmk%2BUEnExDgoGcwbpR0vWUCQJBl%2Bho2imnczMZTHBcg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04aac0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1fc.png | 188.114.97.1 | 200 OK | 3.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1fc.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash24e928a7c329945bea5142b83187d355 c36bf660c26ccf177931764f07f6a4b7132481c3 735dfb93eefc3b568d5965eb97b8cfa08d8b0dc6e74f85f13d2024a18d9484c7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f9-1f1fc.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2953
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b89"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kpEHVUn6FBF1PiaVEcTis1RSLZQQCwRVsORCFywZ1N%2BAyc1vQ8Q9VSJ1YbzDVj40Kn5x7DyDrY2aQ8d5c89DPNUBY8Jsup%2FnYa86pZ%2FdDlfQzgvH%2FiXb1rwe08bTthAYCi6vAkDlhw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04ab10b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1ed.png | 188.114.97.1 | 200 OK | 2.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e8-1f1ed.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashcfe262de21d6c5cb11a04feb17e4668d 4e761c330b91cdd941da83baf047ce1a1d105c0c 74cecc67c28852c37814d2ddd7453aceb32b690076fd7d94459b9cb45c5058d9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e8-1f1ed.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2003
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-7d3"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9ICJfQqIO0WYtQEC0MfAVan20wvEqK1pasjfGp9%2FfKNGCpZR58MdaP2drWbF0ftb7OgU16qBDW8ToEPftCbmEhAuPZgFRF3RuOhw6%2FHTk9xYMgUnCxqYJ%2BdP6i%2FpoJjJtjkcij%2F87Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04aaf0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1ec.png | 188.114.97.1 | 200 OK | 4.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1ec.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashd8e15b3b4a4ad33482b3906ad5a3aee6 cb945c965dc97db9d3dd2ff7bf0a42b8b5cd692e 68398d08d13d15196be7d1bc49e628b153e87dd49c921d552331682681e72221
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f9-1f1ec.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3970
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-f82"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fu3NLZ3HqaW46sDHKr%2FLHSyyKntvMQETYZPJK%2FW7NtavDSQCnCb57e5rUAkfyinvHzJ4xkXCbcZuUUWjA4LRyey5mRmfsKA2WbUTZl3NQWNE%2B%2BuPq57Wot9kE9XH8RcHZUP5h1sXXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04ab50b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1ff.png | 188.114.97.1 | 200 OK | 3.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1ff.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashf2a663410069dd19a11d0ba13a315481 20a2339289680d89e4d1cba0e8b7f7cc628af346 f6e0df6ee0a4f0648d13e6e5cdbe32f1054132a4f2fe947b8d591b0e07f71ffb
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f9-1f1ff.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3667
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-e53"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hoUk7n2HmrCAZ01BmOMru8RJdEy2CxHjadRt5rpx5YbT14krO70TIk5jOXLWKnHaRn8qtiU5iVOVyMSeP2I07uj2yEtRsm1%2BkLKARS2vn3BBaxCGQqx3WCY6toxnaNC3t2SxajbfIQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04ab30b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1f4.png | 188.114.97.1 | 200 OK | 2.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1f4.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash1435f386451a2574d4ee50046dde3f30 fd0ead654b8a0dcd6db3f93af841dc002a7bd5d2 b4e83aa1c0b484849cf0e21a574abc3e506099123269fd37fae770de0d3f81f6
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f9-1f1f4.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2446
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-98e"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pYDzkrD0zuLCUuEMB2UqzsLLSXnC5p9Cl1BDty73WyWxygv7HtTeTMSE4cisVIiVKqwvA1BNgFXKXqp2Fy7lL4rSYIEJmvHV3EMKU8vZvbu3uANikauvg4unBqXj6b95oXwRvcjQfw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04aba0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1f2.png | 188.114.97.1 | 200 OK | 3.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1f2.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash7dd6159484ca1b6552b2515fc76b4cce 4adbc35e9590a8f1902a4d7fc7532b9b5c03efca 4949511772015a8294fabbb729108799a654bba5d403f7fe2078f1c80cddc416
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f9-1f1f2.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3249
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-cb1"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n2HvTevwM1xxqWTeB%2B0hbRnbxTGZB0Ecb2r9EN%2FQea%2B1OcMwCu%2BJR69Jby2uue6LHhTRKOdhp7lmb3pyZhgzy9dVcRJILJ9JOlGKAYLh3hmHPkvJHwM3RjiCso3LtSHZYdPRq%2Fjo0Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04abf0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1f1.png | 188.114.97.1 | 200 OK | 3.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1f1.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash1d426753471d08307b97dc533326a360 39be02418eab39146f229780bd3437fbcf07c567 375f1fdbc6749a4de7786970625622cd3d0f36469312be588d8987c8804d3d0e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f9-1f1f1.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3265
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-cc1"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x1R60kX%2F802vkBlkTWV4tstZ09qI7mKNsNp0FssAuNyFALMnGnSb5g8fUJrPN47GAbdcqrzB7Zb2kqb8AxciRv7GOjMBZ3U3o98Y3jlMEsA6fkxCe9NrCsnfhX45ckAPIjoekHmfyg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04ab40b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1f3.png | 188.114.97.1 | 200 OK | 3.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1f3.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashd57560fb8eb3f7fc7df3e6ced27dd926 3d75439040139c3191e75df128651e2c6ff4c249 a97839d6a477cd76035119de3028e993a27c0275f14c391cc0328dc41516148c
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f9-1f1f3.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3036
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-bdc"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S%2BYsDoubTs3JLmCM%2BDeBq0MVZVBQdKqkWO7FoHVFSh7xIpwLD86OH36BEJc70TYiLKhVDMgkGSAVevwCgqC%2BeSsNGYIuZ3UAvRNzmEnn833tr%2FrCcGIVMkN7HXwnGLhd%2Fi2MiMABiA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04abd0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1f0.png | 188.114.97.1 | 200 OK | 3.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f1-1f1f0.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashfdf3ba3c72adcb8ef451f52058630878 ccb9c7784e16a5e006e930682ac4c67fd2d7b886 73b612710bb5715829e937d9b2122345692ca9952aa6c4d7c04014194580d4b0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f1-1f1f0.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3436
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-d6c"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XCvHeLedIyjz1rcz5eo9w1RQEQeSs7%2FIFa2Gd%2BKAnBfoVAycvutZQlpbBWPOMDztYAVS4u8p%2BujKhYlYquC6rU9l81C6lJkV1MHhrVgmUrvMkDn1P1XHGWUouBcKwA7Fi%2Fd8VYQWoQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04aab0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1fe.png | 188.114.97.1 | 200 OK | 3.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1fe.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash7b898db0520bf71635b5fe35d5ffe384 b105d4cba791054563920e93c7f0ed5052fa4835 197d5e8df8ff62d2cd303a1abcf6c27d6aafee1c7eaf539e0e95a6942e830bee
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f8-1f1fe.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2992
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-bb0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kVrTdBR6HJN4W%2BPEcmJA%2BRTeZJyMuWW2phBtOauH3RLlz%2FoIaKdVH8aUtgSvv2Ztxf794G6Oux48RB1wR%2BsXDGZ3lfyzm%2FzsjwsK%2Fv20wK2an8bFpSXQ%2Fv%2FM%2Fdj7EhB3ucHxDha4VQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04ab00b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1ea.png | 188.114.97.1 | 200 OK | 3.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f8-1f1ea.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash138041c219c566dd547a16a415dccda4 27bc62fffaaf4ec2b74adac27521f2c66e44cb9b 9fdd504bbb0c3e6cbeb600935ed34610e4c0e4d867566319fe54a9e4f120b8a1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f8-1f1ea.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3228
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-c9c"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cls2ZwllUKN%2ByY%2BqZU%2FC3iuoYeb%2FMgtnq%2B2vHSNKQ6EzKe4nIjdzP9OQf8UM3A68RAfoRr1%2FqdCpSMg5sA%2FwXxZZ%2BpzUbrTJsoFBtGtlMKxZ%2B6vAbk0i4SSTDqBVrs5vNiTnzxQchw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d04aae0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1e8.png | 188.114.97.1 | 200 OK | 4.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1e8.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashcf8274a5b52809a0eeae99175d9f864c 25147e6fb85dd35e2963e9098afeced2cf4c5bf5 a44c64b661220c2cdb645eec038fb2196dcdbc2480ada5b9a3ec7a638f436932
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f9-1f1e8.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 4271
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-10af"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zpLGC25gt7dTJtOoASsuFsoWvsxpj8K67zMdPzRtNUYsPrc3slhPxZEUC4Bo8%2FoZWufcCYbQSe4ZFFfR37xcGjM6nZdKtp9Ug9P31Kl02lnV8aolaV0ARgr3ECocm4AxNTddxlfGEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d07ac50b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1fb.png | 188.114.97.1 | 200 OK | 4.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1f9-1f1fb.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashcf1a958a4d5d81f0cc5bfff544b186d8 4da5ef8d33567b07caf6ef706290f9df3ee6a35c 000c18e54265a25d555813fbec1b3bd97c878af016f8825bf2268c361fddb39e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1f9-1f1fb.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 4587
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-11eb"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=15%2FVfzZKQ10LI1EZFKGJpe7poSzqTT1XlWYdkAJuoEZzTn9D%2Bd6xgdO8EN2WZ7gg0Se3kWNWqG8vy1YmgLR2bV7xlxr4Nq3iCHbnJipBFlocLKKaGkAUvZK4MKBkB0yYft40lGIPRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d08adf0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1fa-1f1fe.png | 188.114.97.1 | 200 OK | 5.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1fa-1f1fe.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash142f7f3955633b6e9ac8ce3d61fe9be3 eed26bc80a1cfd99df8f97fc44a9de6ce985a467 6b6bc76c87fb193420c7e61a338c985baee9b5165e908a81fce894566eb39c87
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1fa-1f1fe.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 4958
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-135e"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WT%2BbGC%2FyLSRhrOCVY6%2Bir5YLtpOwUkxPiUjCb3ldyV8swQWjQyxxMR3QBL%2FeAOkCTXdI6os3sWc6r9JTu2ncE2hokt%2BF2mjUeoEe5TOrOztUwNbxhd21dZWLtXA%2FNTvXVuTtwDIYAw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d08aee0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1fa-1f1e6.png | 188.114.97.1 | 200 OK | 2.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1fa-1f1e6.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash42ed8a01c0c4ef70b9572f4dc02b01fe ba54b81864bfc40e26715ea4cfce7a1f7edf8d5b c213904b26162ac7fd4a85a32ae3a0dc3beff92f465e82e4f4a8584a7eb36bde
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1fa-1f1e6.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2731
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-aab"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6t9Qkl7q9XfrJ4o3r21I95YeOVu2FO79jOywtF7o%2Bhbedoqynn1jIEDYtU%2Bs0Bf223l1G7Yu0j2yifWuJiRjs2wby%2FO1BK9YFq%2Bf4FGxznhKKKC70XYRuIaphzOx1hoKQSbcwTyBmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d08ae90b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1fa-1f1f8.png | 188.114.97.1 | 200 OK | 5.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1fa-1f1f8.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash35f5ad427b2dfdbcae5509785f8433d5 cfa72cd02b886ac4a6ae2662e1528f2b2edf0b99 5f4c667e8db737a93450a9786781b8168514e6201ffb20f310bdb0b58d0291b3
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1fa-1f1f8.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 5869
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-16ed"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qtohus%2B8CGpDul1aMch2ON9xwEkYkHqXxWu6HWyN%2F%2FbLQe8AukqOwoP3d8SKJ4L%2FF3dbmIUw3ovkcbdzBmNPbqZGkoqlq2P7pT4mANT2t2Eis%2Bmr9L%2B3HN08NFjscD4D4JjjQ5QFOA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d11b8a0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1fb-1f1ea.png | 188.114.97.1 | 200 OK | 3.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1fb-1f1ea.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash91ca91cd583b3e39e42aa47ebce15175 e29ca1b2c34d6c391d400dc3ac5501308a52f5bf b7b7834d75c2bb9714e93155420a46c9299e600a4f33444abaf5284a715414ff
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1fb-1f1ea.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 3554
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-de2"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KtQmrJdkKti7UYx8SdwUSArZKaYe06w%2FzMmeVbFmqRXWmUNY239EVWE6%2FfiFhRrFAAeStWGoI5ABDPfYKyuLbpmmQpwCZy1CZr0IGP8qJ%2FdAFjA%2FRI9qFDOJ%2BUVhiaawiPw6eoWW4w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d11b900b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1fc-1f1eb.png | 188.114.97.1 | 200 OK | 3.0 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1fc-1f1eb.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash91a00309463541df6a7feddb6f61131b 39fb07f15d814399381aaf172e6a63464ab05459 7f6decdef558e4fb162e5874d01937530fb436e389f2d672a4d90bcf6b15e0bf
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1fc-1f1eb.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2957
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b8d"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BJ3QVXqhNf7UwBm2PFp0gnmlRhVV10soTIwkELYDdbFRTW%2BEsZKUl3qZn1UcxNdoWVDJlsV89mJfRKCI8gAiZpoqDyBPbvl2tlfYthkMeHP52oWNZxgMMfN%2BesR0dOS4Fy34Q2DGkw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d16c090b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1fb-1f1f3.png | 188.114.97.1 | 200 OK | 2.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1fb-1f1f3.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash3f2d6d05f513892c76682ea06ec375e1 98d39ff864186723c40c319811fedc111199b9bf b95856a34c6525f343e9302170575e5ccee26de74e82b95fb220cf51897986f4
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1fb-1f1f3.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2756
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-ac4"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cNxOdsBwPXZ0u3KI19I1EyuJmtyCzNq9cdlZ1K0L09CoGcpR8erked335BmcoQm8EWvw58SuVOdaeBHDyIUN14xiXl4L9WUjRgiD5kd9NCg1aWxnL21utd7KXZyDaBMqz4h6MkvlHA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d16c070b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1fe-1f1ea.png | 188.114.97.1 | 200 OK | 2.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1fe-1f1ea.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash516508aa776e1e798b397e97cc2d1a1e 6d39d508d4967b60890bfdb62f93dfd2badfe776 d8cdf921ebc14f94f7a1153831bbd6ec35138a2feeb550c0c901506386fc1ab4
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1fe-1f1ea.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:36 GMT
content-type: image/png
content-length: 2500
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-9c4"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5PmRRB6eKdASrhf6RQ1AXOe%2FSNwc5NB9QhGX89GcpF4s5M35z%2BY0oNHwXdommGjFQo67kx5cxbpU1OjpBrUENlQlrW2wWgeVtcuPoEzJkVt47vwEr1tUimhAzIYi%2F3DwX%2BkbpFXhhw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946d16c0c0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/button-JLcigUW8.js | 188.114.97.1 | 200 OK | 13 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/button-JLcigUW8.js IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typeASCII text, with very long lines (8753) Hashc405a8baef6c655cc1d2303539b9f195 129170da88415fd6fbf86c00fe09bc52306d010c 77866cf4a268901d2a6e6d4c209410a5113faa12def577445b34a24acf2c8795
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /button-JLcigUW8.js HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://admin.dasjgntiqf.icu/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:34 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 01:43:34 GMT
etag: W/"662863c6-225e"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TOQdZrE3NSrb%2FvyPR5whdhXG6VtEgFT2oV%2BX4pChtkhEs2qYZMSqWzUpPru5kMHYpedJC07euXhCD6xMHsjp0S%2FRLVMJ0Awkc3ZBXua94y%2FhIvFW3%2FrB87IJoKE49TtJ78THNA8gJw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946c63d730b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/putPreloader-mLtzmkGh.js | 188.114.97.1 | 200 OK | 7.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/putPreloader-mLtzmkGh.js IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typeASCII text, with very long lines (394) Hash49e4df79e6c401005c996b9c26eee65e a33c145571a8bcdf1f24e4fa607089d1ac43c3e3 68d251632dac5a08f2be082b3b135f3fb8e2d1f9dabeb689eeceb3c94be92f90
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /putPreloader-mLtzmkGh.js HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://admin.dasjgntiqf.icu/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:34 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 01:43:35 GMT
etag: W/"662863c7-2bb"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yBeScqmGFIgzB4uWD7xU%2F4xXWRVShBsa%2FU4J5tpDxGhG2OOYp6JM3vOShTHgS79z7y64LIKIfmzq5xvZw2Sp5DASDOgKXzdl%2Frm1lMcRxSdy69EMZSN184IgFvv1wlAOssbKyyYw6g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946c63d6e0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/scrollable-6k0I0yCh.js | 188.114.97.1 | 200 OK | 16 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/scrollable-6k0I0yCh.js IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typeJava source, ASCII text, with very long lines (6971) Hash9c69bdd4b6df084ebfe63bf746e1499b 2c8e544f83644b82c6471191fab6570962cc8311 db371018e9c041c3e2085f1b15b582f748c98c74f00c065c9f9e5a4c48b1e07d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /scrollable-6k0I0yCh.js HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/pageSignIn-aNCa-T-v.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:34 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 01:43:35 GMT
etag: W/"662863c7-1b6c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=InhXx9tXTaLAOABaIIBLvMdngdAWBM%2FLcs40yMsYupiWOrhBcVsM1HNVNVOcXb5HTsZJ80aCOggmqMjCyz%2BwIAqvQez5p7tB790WMUPTzPduThOtrU%2B4vxsMdDcYOFeFXZ%2FuVkrtwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946c969a30b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| | 188.114.97.1 | 200 OK | 14 kB |
URL User Request GET HTTP/2IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typeHTML document, ASCII text, with very long lines (1757) Hashb49e95d9a3c8da3272e07ae1a0859d02 d858da262d8f6377da2108e50c2b10f1496a5285 1e469e4ce497553737a65dd6c19c054ac49a845928ce9addb581a5e8ea1fcba9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET / HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 02 May 2024 16:09:31 GMT
content-type: text/html
last-modified: Wed, 24 Apr 2024 01:43:35 GMT
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ITnlTHt6FnOkGmuQRTkeBEhNWJL1Rz0E5k0wuD6St8diHd5RhAiFaoS4fn4M%2BCBNckAectFP%2BJbunO6%2Fx22O9pweFp0%2FHEeUu4wwSF5466D5sQ%2FepfzNldC0oeuSDCu4LbO1k4O8Eg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87d946b2ba190afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1f8.png | 188.114.97.1 | 200 OK | 4.3 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1f8.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash2bdb604142dab47825be67a816593db6 2c5ce27e333e0ac2dfb9a41dac010b7a150e6fdd fed1d3d7330a79296807dac46ac1c667c8e14fb763127b9dcdc25745327c393b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e6-1f1f8.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4257
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-10a1"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZzFLPNRUZ3qVX5MTRf3hfvxqK70gwMSWR3xc2QimCyhvwjNCNFNb%2B%2FhejvF3%2Bb4OexS1Xp0b%2Fn0l6dSQ7eVcitOnIIYvey9kmF0arawbQUPdi77MESbVmr06RSCz5ZJiPKO8tcsSuQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ca3a8f0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1fc.png | 188.114.97.1 | 200 OK | 3.4 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1fc.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashe8bfffa7fbcd0595ad428067604d1b26 df0e32107e44729860c190bbe0b24e467a3d4216 75e7047463218d3570b6a08036c2cfbe9d0df9e7dcb140e4a0c67d561f2dc1a2
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e6-1f1fc.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3371
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-d2b"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W8wnHVG1vV06xGiQavKDlQGTA2%2FHVY1aCvufsqbeIcUHV5sd8RqxHjqVkhnFlW5viSQtUqbZvB5f%2F06ZBgusJPMAE2x9hU3f4B8VeP6zi0Oc2lrIPWI5kudqgLxNpOFW%2F1HUBXgbXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ca6ae20b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/langSign-lcKrqmwM.js | 188.114.97.1 | 200 OK | 1.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/langSign-lcKrqmwM.js IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typeASCII text, with very long lines (1751), with no line terminators Hash6503e4eb7fe92e639f1398a512bdf9d5 8fe9788360af3dde5507e78d48aa5324a99c0216 fe461dd4a36a65359703e4ec0f5f2a6cfbf8bc2d73ef82a8a75b3df3f12379b8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /langSign-lcKrqmwM.js HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/index-yErKHXCK.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:33 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 01:43:35 GMT
etag: W/"662863c7-66e"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xXqWBbmFvhkmg09ab562Tbpj07dcbAJgWTJhQMeSVkSP9yJyJw2xIBUntHPReaedXSheKH6ArePa1lezm18DvnmLPoSTHTxhia3uXuc8Pc48Rp9aUk1Z4wKLsgnhmqVoa1NGuHxciA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946bf2c2c0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/page-ogLt27p_.js | 188.114.97.1 | 200 OK | 10 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/page-ogLt27p_.js IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typeASCII text, with very long lines (10306) Hashbc365e2f3bbd4b93dac0fd7e6aae0a02 1ca5d6535f8a6371eed1d6bc36d68a27fc7b3396 43844dbb9dc22360f94b6045c82fb0a98eb62d9f016d2f065b6403298d121f60
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /page-ogLt27p_.js HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://admin.dasjgntiqf.icu/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:34 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 01:43:35 GMT
etag: W/"662863c7-286d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WVnjLBmVcePq4%2FXrhp4bOKppDcnjomAp8afwlAEOZ42V9diIoF%2BbPrvb2w3Hf%2BsVLWy%2B3twIoodMqh8CC5VaNmnh%2FjWC3vwFkAlwCUJCa0tCtWrfImYzXV2UWXNr6OUgu%2FF5tT%2B%2FPA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946c63d6f0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/countryInputField-p2D2hiUv.js | 188.114.97.1 | 200 OK | 9.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/countryInputField-p2D2hiUv.js IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typeUnicode text, UTF-8 text, with very long lines (9499), with no line terminators Hash5bfc698b33778838d698dad8be88be39 53dbba4572cf8afb53da82240cd7c3df9b23cc27 3344e07466c16527a2032e64a21b51b0772fe5879b8c197cf48d087882ceb8fa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /countryInputField-p2D2hiUv.js HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://admin.dasjgntiqf.icu/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:34 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 01:43:34 GMT
etag: W/"662863c6-240d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4ySd4sSmYr82aEyoZn3H0MoTcS%2Blnl33cK2toSWkTWFnkKvvZx5Op6o7LffQHxKmxGDHf%2Ff5Wrc1eCWL6blhI6qKPI8qHDbLUpkRwxcySOLUTrcBTIuM2m%2B0ZHJFtU%2FOeMBpKoXYdg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946c63d710b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f3f4-200d-2620.png | 188.114.97.1 | 200 OK | 2.7 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f3f4-200d-2620.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash15e55d57d6656aabf58623b7d329ff3f 952b745a6ec0aeafd61fb7738271257e33b15281 62314937372b90101ce2d80d73f732588279359a2c83ab2bdcef0dd6ce5b7a23
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f3f4-200d-2620.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2659
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-a63"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3k0UTYaQkAojZoTBNjkLtL6vsCZsGYaT7ZTGtnfUgkGuqfDkP10DyFjPzMbbl5yQGswa95Gt8EvMe%2FXM%2Btq8JTBFbMZTss3y0Jzkvs0aLJxS1KwmQBSk3RJHDs%2BYY7JE3Opketw5lA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ca4ac20b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/pageSignQR-NpVEcBsO.js | 188.114.97.1 | 200 OK | 5.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/pageSignQR-NpVEcBsO.js IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typeASCII text, with very long lines (5941), with no line terminators Hash6dd0687e3033641d12402e843d6564c3 946fe6ff91be54cd0eef9f8cf62928719472c4f5 31b5d7ebe3103c0537cadab86ff66a152b414f7470a207bcfbe224c05f6d64d4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /pageSignQR-NpVEcBsO.js HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/pageSignIn-aNCa-T-v.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:34 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 01:43:35 GMT
etag: W/"662863c7-168d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4DPKptVmXA2QCXyiRrml%2BYZQ32fPUy74w4NH58a2gPgpQthb9z92K0FFbo%2B9h76G%2BspFxlh%2BKTh3LlJGTllxUmjqJK7uNaXe7dW%2FU0d9vrv5MIE18uhEz4CluuKnstO5yczBUhPufQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946c959920b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/page-ogLt27p_.js | 188.114.97.1 | 200 OK | 10 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/page-ogLt27p_.js IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typeASCII text, with very long lines (10306) Hashbc365e2f3bbd4b93dac0fd7e6aae0a02 1ca5d6535f8a6371eed1d6bc36d68a27fc7b3396 43844dbb9dc22360f94b6045c82fb0a98eb62d9f016d2f065b6403298d121f60
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /page-ogLt27p_.js HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/pageSignIn-aNCa-T-v.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:34 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 01:43:35 GMT
etag: W/"662863c7-286d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PWYweA73TPQRMTNUoHmWoAfs0uxMtvyy578OUeavOjxp5Vs70%2FpsSzeRSjSblpAdaG8QOITjFUhOa72u%2FSMjjJq0yYlz9b%2FQMmBjiEF%2BzfHJ7n3W43GTxGKrkjY9fSl9K%2FF4p8CbTA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946c959890b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/pageSignQR-NpVEcBsO.js | 188.114.97.1 | 200 OK | 5.8 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/pageSignQR-NpVEcBsO.js IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typeASCII text, with very long lines (5941), with no line terminators Hash6dd0687e3033641d12402e843d6564c3 946fe6ff91be54cd0eef9f8cf62928719472c4f5 31b5d7ebe3103c0537cadab86ff66a152b414f7470a207bcfbe224c05f6d64d4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /pageSignQR-NpVEcBsO.js HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://admin.dasjgntiqf.icu/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:34 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 01:43:35 GMT
etag: W/"662863c7-168d"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hhwRtOsguYHqJGn%2FKOhb3Tu9Z2yUK0LSvd345EPDhp%2B0srtANF59%2FJR79AJ%2FCBzie1ASzu2gt%2BFUiiRr4Re9zM%2B9b9pL7wug3N94ZerBeXxy1xnY6NJsBTWCyQ3EeA5OC%2BMdpulFqw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946c68dba0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/countries-lRU-UavE.js | 188.114.97.1 | 200 OK | 24 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/countries-lRU-UavE.js IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /countries-lRU-UavE.js HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/index-yErKHXCK.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:33 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 01:43:34 GMT
etag: W/"662863c6-5e21"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZMSBnfLekxs%2Fb5JRF2d%2FMnadU8gGXa1rr9%2BbrYApBeioMFsgyGZHiCwZJGDNl7zIqGcNJgd98jbp3vKmBc1F9ZCeeOKNo1YVnqmNizMuuaAvKIHMux326G5Wx3qJVWUIlVqf8Q3tNw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946bf3c3c0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/index-r_N6u86T.css | 188.114.97.1 | 200 OK | 450 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/index-r_N6u86T.css IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
Size450 kB (450030 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /index-r_N6u86T.css HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:33 GMT
content-type: text/css
last-modified: Wed, 24 Apr 2024 01:43:35 GMT
etag: W/"662863c7-6ddee"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sdho39T2wn26T75jLyL24dAyZUHBeCNPEQCEW4I0gQvY%2BvHd7G8TNO1mGAoH0sN2uiWtbWFU8ID57BQOV2iXRY09QUES2aqzok8udsEz58QeTKhAX7DzQfMLiNAkctJPYAeNpocdjw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946b6ea850b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1f9.png | 188.114.97.1 | 200 OK | 2.9 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1f9.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashffe1fb828ff500ae47b3f2727f1b95b1 0adefb360e2d698e03fb667e0dd67ccb14bd1e4f dd3b427be088465e947db4dc7ac82f135a890d6f921a2b982822fb19bda2f420
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e6-1f1f9.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2935
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-b77"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1%2FETVXKsmCuIUxwF%2F%2FVIlJL69se4Eems8mCE5UzC7ZohTdTxBhAJNzkzE2xuuObCQOLBLXH0QOZrcQTcQFe0HR4JmWs%2Fhl8ySfJ%2FuZiTJemiBQn97zWDCO7%2Fx1t%2BVprsABkTNfH6KQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ca7af20b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/fonts/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 | 188.114.97.1 | 200 OK | 11 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/fonts/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 11016, version 1.0 Hash15fa3062f8929bd3b05fdca5259db412 6ff06a34f68ad0324ddec1bbe4d453c959178b36 5d1bc9b443f3f81fa4b4ad4634c1bb9702194c1898e3a9de0ab5e2cdc0e9f479
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/fonts/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/index-r_N6u86T.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:33 GMT
content-type: font/woff2
content-length: 11016
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-2b08"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mps%2BVID6%2BH2KjQkGVyS2x8i42mXRY86myEwmQf1I6MjDti3Fo2l%2FCTnbuctBrB%2BNpc9%2BGOUu9m1YdULpnQkWBENHeMgR1yR2BO0XywOGOguYGRuiamMQRknSy5waXTQF3DT42KGyfg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946bebbb20b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1e9.png | 188.114.97.1 | 200 OK | 2.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1e9.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash7bd3515cf442ae094138ce1ab113b33d 0cafbfa26671dc22c8f5b1c6f78b9008603dfc78 dcef891001076c10c5b02c72a8c99eb5d9a46cfa4bf660bafe70aba914aed99e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e7-1f1e9.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 2647
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-a57"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jaiX4eW6lVcW1gayXkO9ndm2SNRkG%2BjDEPm3Gat3Jo7wrJP%2BrrcVtX%2FHpDeufTbOggVWd%2FtocaZXeQBtOsp4J9ti%2B4i8WrQORamHw08t8ANSV9bhBvn4dBB2O9dshwFYh3S%2BFVLyPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ca9b1f0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/countryInputField-p2D2hiUv.js | 188.114.97.1 | 200 OK | 9.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/countryInputField-p2D2hiUv.js IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typeUnicode text, UTF-8 text, with very long lines (9499), with no line terminators Hash5bfc698b33778838d698dad8be88be39 53dbba4572cf8afb53da82240cd7c3df9b23cc27 3344e07466c16527a2032e64a21b51b0772fe5879b8c197cf48d087882ceb8fa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /countryInputField-p2D2hiUv.js HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/pageSignIn-aNCa-T-v.js
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:34 GMT
content-type: application/javascript
last-modified: Wed, 24 Apr 2024 01:43:34 GMT
etag: W/"662863c6-240d"
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WvfcfCeqmtQzrcdGHc6MwgFrWheMwdlUXSMf7F3Rkf%2F%2FUGpupcJxAZoikRfLTwK8byx8UO5Y0dLjRV8u2uXHbG8UY0UEEt8%2Fo%2BhupAtkNGXFU689ZR%2Blx40t1w6sfXrKeTJHs9kBmA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946c9598a0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1f1.png | 188.114.97.1 | 200 OK | 3.5 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1f1.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hasheba5169e2e179c9a71f0e60f47e2627b 13cf3e44ed19409477d73e3f89bc4d6b4fbb4990 b9c5f623a4846842eed51852bfa4e1629c8f0b5abb1a35d9129f10756da84e28
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e6-1f1f1.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3451
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-d7b"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MdMk9gAY7WxU4NxRty99QlwGAfRjRv%2BkwhHckhlRVZGF7VSsz6aKfMrsAu8TaATlCPqt%2BE%2BqovhnLJiy0LYCbM5KJYRDuRPMTRjZ8meJq7fOyg4Sk6fdtKzxITGnguRI81qjMgU4Ng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ca2a880b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1ec.png | 188.114.97.1 | 200 OK | 3.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e6-1f1ec.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash956c42e4dd1a944a0476c70ad19c645a bf0f11e2e3599be4b938c12da00940146265edd8 641a3beeee529414cf161b2526429b383653790ab3de6f374e11cd5d63a3b592
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e6-1f1ec.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 3592
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-e08"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pcQKrk6HRrNZQub8TeRzcei0SUxmWN0%2Fu2rbxeWVI3nBk%2FEdo8q094SfmtaGESpo96yda%2FxUaNl%2BlWOZGf6ekHpNIsH3%2FaRf3Yj9FrLvypwuy0nd7xnNaVRe298YcgCcD4PhR6FlzA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946ca5ac50b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1f9.png | 188.114.97.1 | 200 OK | 4.2 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1f9.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hash08486ee438b1c4222ee73de4574ad834 89719cb5942205286643e77733a3499cb29f80e2 6dbef1ab1b7b2497e85a436efc538906258f6ccad69a67e627baead16b810a31
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e7-1f1f9.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4199
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-1067"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AQLn6xq8c5OrO8aP2%2F0STFDmpq5CuHlGZYe%2FZBNacu8vdMEK8gRuL%2FfJOIyaapBGFDWq7VGjOOA7v1pYX2BFJfe0lMyC9tXgmoRq85ffSnbj1194fBdp5yjKelPakDDwE8rB8jtFLw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cacb7f0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|
| admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1f2.png | 188.114.97.1 | 200 OK | 4.6 kB |
URL GET HTTP/3admin.dasjgntiqf.icu/assets/img/emoji/1f1e7-1f1f2.png IP188.114.97.1:443
Requested byhttps://admin.dasjgntiqf.icu/ CertificateIssuerLet's Encrypt Subjectdasjgntiqf.icu Fingerprint1F:A7:9D:22:D6:8D:4C:B4:AC:BE:75:02:A4:DE:9C:7B:3A:B7:AE:5B ValiditySun, 14 Apr 2024 06:24:24 GMT - Sat, 13 Jul 2024 06:24:23 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hashb09ed67964163220bb57e609aeff4c17 7e872b129fdf1ce5425291f4c7afdfd1216cbc3d 13ab5964b285d0f107f2dd6fdd940dddd44e2158841f0ad897d4986a32274118
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Telegram | | OpenPhish | phishing | Telegram |
GET /assets/img/emoji/1f1e7-1f1f2.png HTTP/1.1
Host: admin.dasjgntiqf.icu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://admin.dasjgntiqf.icu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 02 May 2024 16:09:35 GMT
content-type: image/png
content-length: 4598
last-modified: Tue, 20 Feb 2024 15:23:44 GMT
etag: "65d4c400-11f6"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gfDN5gHhV%2FLjim9JyK5HYT8kIGPQIjGyuCLV8jIvdbrqgs5FXHIS67zTRNLVzRYGxY%2FxA9I%2BQGg3lxtxCZ%2Fsz6C9pMZBN5UH2f4%2BDGt0J3OOU%2Bn31yYANA%2BN%2B%2BgQyvOSE4rvumdWUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d946cacb7b0b02-OSL
alt-svc: h3=":443"; ma=86400
|
|