| hiddify7.starvp.ir/img/twitter.png |  188.114.97.1 | 200 OK | 1.3 kB |
URL GET HTTP/3hiddify7.starvp.ir/img/twitter.png IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typePNG image data, 21 x 17, 8-bit/color RGBA, non-interlaced Hash1ed9bf7633f4f449c8d2df94ea0eb35f 2902ba9c2b127c74c2550298a0578d7d8da941c2 e7d23b06a4ffd600558e5443d1e32daaaf13a27cf7bb8b7cc163a92b4054aaf2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /img/twitter.png HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/css/telegram.css?236
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: image/png
content-length: 1272
last-modified: Fri, 10 Nov 2017 17:54:14 GMT
etag: "5a05e7c6-4f8"
expires: Tue, 23 Apr 2024 16:45:31 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 3615
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5NsoC8xukKLzxkh%2FjixZIOcaNhC18YSyv1v%2FTQtdt%2Be8wGvA50%2Brg8Gkw0dNkCnta8xyoagYdvwE1PDltp63V4Gv5IK22dRSlHebx434gRWO5g0SCgDwjujvXALRhALzVVXyeOg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d2bcac56a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/img/SiteAndroid.jpg?2 | 188.114.97.1 | 200 OK | 21 kB |
URL GET HTTP/3hiddify7.starvp.ir/img/SiteAndroid.jpg?2 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 290x270, components 3 Hashf5eb8dcf9b18f19053034101e920574e 9513c6c5e39669ad27132d470008955dbaae61f0 15a94720d72ed1727fb281ed4af914e17cd8166bb18f5a8484f32f9faff4f365
GET /img/SiteAndroid.jpg?2 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/css/telegram.css?236
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: image/jpeg
content-length: 21090
last-modified: Sat, 09 May 2020 18:58:54 GMT
etag: "5eb6fd6e-5262"
expires: Tue, 23 Apr 2024 16:45:31 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 3615
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FMLJOHqYCUJ50JZr3IlXwMZvTC%2BdMIpPPhRI4%2F2A8EmHxMrZgen%2Bcp6dkB6zdvjE06Bw4pf0ENB21Z62%2Bn3TwkPXxJ9f2twNxRemR%2BrepElIS%2BtQeAlQjv1OU3mZORJJaNVmG10%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d2ccb256a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/img/SiteiOS.jpg?2 | 188.114.97.1 | 200 OK | 31 kB |
URL GET HTTP/3hiddify7.starvp.ir/img/SiteiOS.jpg?2 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 442x270, components 3 Hash89486a05599a1cfd549f8fb2d70e7d73 24867697525df19b88e79d75ff32384eba57b321 5a2c666b6e4f30ff921353cd9a3eccc09b9314c5c5ab11e1a3928936e497b2dc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /img/SiteiOS.jpg?2 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/css/telegram.css?236
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: image/jpeg
content-length: 31305
last-modified: Sat, 09 May 2020 18:58:54 GMT
etag: "5eb6fd6e-7a49"
expires: Tue, 23 Apr 2024 16:45:31 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 3615
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HuAReojEodRLtsrCewtzVCy3ScIyPMP8bJLn53sQvEonJJvf99ryv8NCKMUZATzrFpO2Coti0zYCglw1x6XyWqWRgSQSb1FRNpp5ZyZ1onjbVfTwXyiKewuPPJIu0vWaDwutjU0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d2ccb756a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/img/SiteDesktop.jpg?2 | 188.114.97.1 | 200 OK | 98 kB |
URL GET HTTP/3hiddify7.starvp.ir/img/SiteDesktop.jpg?2 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1246x260, components 3 Hashfa44f18971e0750249cbcf34f66ae11a 0b4017cad011b2ef346094e1c37abb912fa9b7d7 9d47030d555e1765171c05b57ed755744d6051364674efbd99a98df9ec7fa9cd
GET /img/SiteDesktop.jpg?2 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/css/telegram.css?236
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: image/jpeg
content-length: 97628
last-modified: Tue, 11 Jun 2019 13:49:53 GMT
etag: "5cffb181-17d5c"
expires: Tue, 23 Apr 2024 16:45:31 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 3615
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4t0V%2FYSXGGVSglEqtPgOH48M2mzd4CCIPjx1RJmP0ErV0teBwrCe8MlWvfyBaERZQ7Ek7jsOV67806mIyGFFi1wgbr8adW6ue504XUuXL9iFs6BGe7BEhiciFn3GWT8AUl9AVdk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d2ccbc56a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| telegram.org/file/400780400268/1/6Avx2xeE-E8.239216/5a7f21012854ea61ce |  149.154.167.99 | | 157 kB |
URL GET telegram.org/file/400780400268/1/6Avx2xeE-E8.239216/5a7f21012854ea61ce IP149.154.167.99:0 ASN#62041 Telegram Messenger Inc
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30 ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.4 (Macintosh), datetime=2024:03:27 17:06:42], progressive, precision 8, 600x350, components 3 Size157 kB (156857 bytes) Hash552bf5df1e3c72027bd94ccb8da700fc cb57b82232ff1271e5222c818e27dd63f9a7409d 75d1e62847c8b3a5df29a842edbaeaa0be92ee69915dc8413efe789176f67ba4
GET /file/400780400268/1/6Avx2xeE-E8.239216/5a7f21012854ea61ce HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: image/jpeg
content-length: 156857
set-cookie: stel_ssid=b93f65e1c3a5f1ce2f_15177655273146963580; expires=Sat, 20 Apr 2024 04:52:26 GMT; path=/; samesite=None; secure; HttpOnly
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 17:45:46 GMT
etag: "5f2b86bcead2b04cf9d6134a8688fca68f34b96a"
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| telegram.org/file/400780400906/1/nG_ME-jFfII.256820/2569601ad1ecf4c3c2 | 149.154.167.99 | | 174 kB |
URL GET telegram.org/file/400780400906/1/nG_ME-jFfII.256820/2569601ad1ecf4c3c2 IP149.154.167.99:0 ASN#62041 Telegram Messenger Inc
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoDaddy.com, Inc. Subject*.telegram.org FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30 ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.4 (Macintosh), datetime=2024:03:27 16:16:22], progressive, precision 8, 600x350, components 3 Size174 kB (174416 bytes) Hashc4bf438f90794c480fd0fcad5f1d8432 0d395450a43d6a94428a6f6c99b02f90a08fd262 db092c7e51035de44dee2650796bef0601cac17812d808020e5892657b1cb0f7
GET /file/400780400906/1/nG_ME-jFfII.256820/2569601ad1ecf4c3c2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: image/jpeg
content-length: 174416
set-cookie: stel_ssid=a0b9dafa7fd5934a73_17922852831008389939; expires=Sat, 20 Apr 2024 04:52:26 GMT; path=/; samesite=None; secure; HttpOnly
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 17:45:46 GMT
etag: "7ba40344bed02400a1b3bbcb694e50cd469f2ff7"
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| hiddify7.starvp.ir/img/t_main_Android_demo.mp4 | 188.114.97.1 | 206 Partial Content | 251 kB |
URL GET HTTP/3hiddify7.starvp.ir/img/t_main_Android_demo.mp4 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeISO Media, MP4 v2 [ISO 14496-14] Size251 kB (250838 bytes) Hash36bebc24f7516d37cbfbb4ee2aedf6f6 c40bb63cbe7c48f67faf8db89240fd60f912e1ce 03b2ae439d25e00e297b01942883f4ef8a6a5c87e01dd0faec6f1eef24b92816
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /img/t_main_Android_demo.mp4 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 206 Partial Content
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: video/mp4
content-length: 250838
last-modified: Sat, 09 May 2020 18:58:54 GMT
etag: "5eb6fd6e-3d3d6"
expires: Tue, 23 Apr 2024 16:45:31 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 3615
content-range: bytes 0-250837/250838
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iC4C%2B2j5jsskZOVOMo7DEDyjp03AiLdFp9KArjkv2xnDQ3CVOUaDewVWdNCizNo0B6dDh3F6rxE4RgL%2BHrwGlvTA%2BhyxgA4DBo7RBmGWtpme4jwfze7vWBWA9Z2YkTfIP7CZr%2FM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d42e1856a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/js/main.js?47 | 188.114.97.1 | 200 OK | 251 kB |
URL GET HTTP/3hiddify7.starvp.ir/js/main.js?47 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeJavaScript source, ASCII text Size251 kB (250728 bytes) Hash4c9ba6b680fc51b6e5bd4217a1550c88 3fa0e7d643cc1e3008e0ffeba46a1e3682e2eaf7 51c4d88fd78f3b8efb16f845e75be7f1bb288fdf2fd39d033868a0346db7fadb
GET /js/main.js?47 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: application/javascript
last-modified: Sat, 10 Dec 2022 23:01:54 GMT
etag: W/"63950fe2-53e6"
expires: Tue, 23 Apr 2024 16:45:31 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3615
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ea6uS3yPnbA%2BSAcmAsDPJGYpXFW%2FxcKhMBCnT6k1K3diVm0UWQNZXfUgt37AaF52moZEh9tMmL2%2FiV8Gvt1oWP3MnDAO8%2BFjWVmvDWTh3LXa5fZRjLiXFyxiEq4dc3gls3%2BmjoM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d26c6256a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/img/apple-touch-icon.png | 188.114.97.1 | 200 OK | 5.6 kB |
URL GET HTTP/3hiddify7.starvp.ir/img/apple-touch-icon.png IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typePNG image data, 180 x 180, 8-bit/color RGB, non-interlaced Hash295ccdb03006b8dfef45090dafbd46ac 491ab660270e47cbac6a5731c51cca71c1c1b2b1 a51d667d4262047c23e3a2a8aac3b46dc8a58c686cc013f2354011c07bf22cf3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /img/apple-touch-icon.png HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:47 GMT
content-type: image/png
content-length: 5644
last-modified: Thu, 21 Apr 2022 13:47:47 GMT
etag: "62616083-160c"
expires: Tue, 23 Apr 2024 16:45:32 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 3615
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zTHq%2BNno92EuSo411Bhbludqtp%2FkEjOMOQ1WMCyVjkgrxdsG3sTAZpbmwHKQt5jKNltYYAqgNI8X667W%2BgJ2DF6%2BMpAevW%2FWtbX3Ju7y8VrWuOQR1lYL5bhdKjExmAynZDXunDU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d50eda56a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/file/464001402/5/eOMSj3GzJXo.13579.png/f3cec6c451d023c109 | 188.114.97.1 | 200 OK | 24 kB |
URL GET HTTP/3hiddify7.starvp.ir/file/464001402/5/eOMSj3GzJXo.13579.png/f3cec6c451d023c109 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typePNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced Hash1e7f4d96ca0369c080d5e57ed853241d 5d3989e1aeb51b29d7643562fa70c426d411b21c dfa109132cc3942314fc5aa9ca8230eb6b6b1d0e40b085e0289c104600750b41
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /file/464001402/5/eOMSj3GzJXo.13579.png/f3cec6c451d023c109 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: image/png
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 17:45:46 GMT
etag: W/"67176c69aa11e9f08d30f489308dc74d85e92ef0"
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rfTgSkIYJR3PkDfaKZmkqq%2Bkv2tb9cP5TGIuB8E1wAQc31bMvDI%2FpQsJqziiu5K17XrRzTDwnT9x%2FjSxMyQMQcyH7SNaLtoTDXB8ZKyMIEC0qQguq6RPvWIM4e8XIsGQT3QuTi4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb5d26c5156a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/js/tgsticker-worker.js?14 | 188.114.97.1 | 200 OK | 32 kB |
URL GET HTTP/3hiddify7.starvp.ir/js/tgsticker-worker.js?14 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeJavaScript source, ASCII text Hasha3eecfb5cd60979b65af8ef49bb66045 d4c4eaab526e88c2eb58339a28207dba967be384 b508251f81df8fda1990736e14135063e5421f6c424734c90b263d8bdfc944e9
GET /js/tgsticker-worker.js?14 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:47 GMT
content-type: application/javascript
last-modified: Wed, 29 Jun 2022 21:52:44 GMT
etag: W/"62bcc9ac-1731"
expires: Tue, 23 Apr 2024 16:45:31 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3616
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YwkjpaaWsbV2EsZVSwM5BknthvFC174HDoePtcIyd1Catfk0aQ%2FvKTD6ycScbp8YOxe13GZRBgmf2N4rlQJGBJ0Pqww0HzlV3D%2By5XgqJQ00aTFzdyS1Cea9A18n8eE5Q5BjC7E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d7d9a356a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/js/tgsticker-worker.js?14 | 188.114.97.1 | 200 OK | 59 kB |
URL GET HTTP/3hiddify7.starvp.ir/js/tgsticker-worker.js?14 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeJavaScript source, ASCII text Hasha3eecfb5cd60979b65af8ef49bb66045 d4c4eaab526e88c2eb58339a28207dba967be384 b508251f81df8fda1990736e14135063e5421f6c424734c90b263d8bdfc944e9
GET /js/tgsticker-worker.js?14 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: worker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:47 GMT
content-type: application/javascript
last-modified: Wed, 29 Jun 2022 21:52:44 GMT
etag: W/"62bcc9ac-1731"
expires: Tue, 23 Apr 2024 16:45:31 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3616
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sUgGzZnJbrI1ItA7D5ZKMfsSxeKmPsEoD9mSKnJEZNxc4617jqDE5el8yE%2FJAqsV1Sc1uHVUqE3oN7%2Fppufe10nE2Hc%2BAYonABWcVqPJGI6Kg3%2FkWcKfZ0Ld%2BZqcQt%2Bfnz6cS7E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d7c99a56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/js/pako-inflate.min.js | 188.114.97.1 | 200 OK | 23 kB |
URL GET HTTP/3hiddify7.starvp.ir/js/pako-inflate.min.js IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/js/tgsticker-worker.js?14 CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeJavaScript source, ASCII text, with very long lines (22681) Hash8e548b1ad991b0cd636a7e4939e3c420 ffacc63c9b5d77b0597f9c054ca349312626a5fe 2ca27e9a8dae569cdeac42752ed1aed1afeff7f19282d3cc12c0aaa54a08bc04
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /js/pako-inflate.min.js HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/js/tgsticker-worker.js?14
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:47 GMT
content-type: application/javascript
last-modified: Fri, 04 Oct 2019 11:37:17 GMT
etag: W/"5d972eed-589a"
expires: Tue, 23 Apr 2024 16:45:32 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3615
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2O1swvXJGZDtSuavgg4VDHKUxmmKC9QzdHygk3%2BgI5s7y5kpl1nAc3QCxJvBxzi1DbsKZMCwH6CMD3yYtdUhdqiO7xcFyH%2FIQE%2FFrhXiMgplUXluqf%2Ft1kuOH16L3sttukBz96g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d82a2556a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/js/rlottie-wasm.js | 188.114.97.1 | 200 OK | 101 kB |
URL GET HTTP/3hiddify7.starvp.ir/js/rlottie-wasm.js IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/js/tgsticker-worker.js?14 CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size101 kB (100601 bytes) Hash9b31c5083355b2aaaaaec512f3a0021d 395c9925e89a0ae66f0e016ae664c0aabfd64865 59df8caec8e28f1dd238c2f59fdb02854b51da69b0bc1a18271c502a9a166295
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /js/rlottie-wasm.js HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/js/tgsticker-worker.js?14
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:47 GMT
content-type: application/javascript
last-modified: Tue, 14 Jul 2020 22:03:36 GMT
etag: W/"5f0e2bb8-188f9"
expires: Tue, 23 Apr 2024 16:45:31 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3615
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BnMn%2FnxpO5uWNEzcnQBZfraHXs2EleG3ekAZmdDNiMpJrhxpNPWcc6TT%2FhiHUe0x7DlhoR9P17kKPXQfQTRJWAfCpRzxn6ECRatGUpTx%2F8R%2FVx%2F0w%2F3Whxxc%2FHyCCxq2KdYKGL0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d7e9dc56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/file/464001453/2/eW_MzRhUGoM.10926/fe1f3bc3dd08367c0a | 188.114.97.1 | 200 OK | 11 kB |
URL GET HTTP/3hiddify7.starvp.ir/file/464001453/2/eW_MzRhUGoM.10926/fe1f3bc3dd08367c0a IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/js/tgsticker-worker.js?14 CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
Hash7d8c00d2a1242a45294a12ce588fb7b8 d8c0a0bc27c4509021593222647216700cd1aeee c534befeb8ad7d4b05011d5b5082e389e4e7b16a7f577341e8a5402f3e574c40
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /file/464001453/2/eW_MzRhUGoM.10926/fe1f3bc3dd08367c0a HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/js/tgsticker-worker.js?14
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:47 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 17:45:47 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NxaW7jo8aLroDsNSv8U7vUD%2Fjhn1X%2FDs%2FDjZLWYigCDNo6NnZKa0NabXvu5JPLpbA7LCmokkgD3nmitbWYWlk7gq%2B96cFDvyTW9ZaqaXVJEEIfyb7MD6njNA5jrAi%2FtvaASNT%2Fg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb5d8aa9456a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/file/464001737/4/Fn57W9l3xI0.15286.png/d4b936ecc2c939f4fa | 188.114.97.1 | 200 OK | 15 kB |
URL GET HTTP/3hiddify7.starvp.ir/file/464001737/4/Fn57W9l3xI0.15286.png/d4b936ecc2c939f4fa IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typePNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced Hash5f245ac9016657dfafcbdbf61b61e514 4033c942a333f667ef26c5d45ed5e233bd83b8b9 006d88e7389f56f925cdac325a2d6fc7956bbdcc30e46214bdd97b43274bd78e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /file/464001737/4/Fn57W9l3xI0.15286.png/d4b936ecc2c939f4fa HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: image/png
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 17:45:46 GMT
etag: W/"93939a07f86b42b04b779841ba81a1ef4ba2d929"
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QQ1GgEKgKsdnDMc1doainhcjkOP3iOexV%2Br1Jrct6mPcTwJEgISwAkRactPUUT5%2FkCMQazHKDKzYNA2xDk2Qk0HBxMaLjGbY%2BYIJlxS7g%2FQJFSgJxP2LjL0YW75jli9ywQARQIc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb5d25c3856a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/img/t_logo_sprite.svg | 188.114.97.1 | 200 OK | 23 kB |
URL GET HTTP/3hiddify7.starvp.ir/img/t_logo_sprite.svg IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeSVG Scalable Vector Graphics image Hashe75f7f8ac71782dda40464528a4f619b 1294a00a625b50ff7c3eb3119a71d49399c9ac29 832fbefd7a4fe8f651058597d9f1910883d1cbd56d0ceb343e7d6170aeecf982
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /img/t_logo_sprite.svg HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: image/svg+xml
last-modified: Tue, 19 Apr 2022 11:15:29 GMT
etag: W/"625e99d1-5a4c"
expires: Tue, 23 Apr 2024 16:45:31 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 3615
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h6Yb4m8%2F0YpP304ROazuqllrrtVy5phxs3sEi%2FvI11bhOZrpKPJ77snh0ZgTFxrUP1XtBwdAUxrxBNOkpgHqyA1cR1i1HL9hfU1brDtqZah%2B4hW%2BvjCdkzvglFj5kRRs%2BwM0s%2Fc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d42e1456a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/js/rlottie-wasm.js | 188.114.97.1 | 200 OK | 101 kB |
URL GET HTTP/3hiddify7.starvp.ir/js/rlottie-wasm.js IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/js/tgsticker-worker.js?14 CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size101 kB (100601 bytes) Hash9b31c5083355b2aaaaaec512f3a0021d 395c9925e89a0ae66f0e016ae664c0aabfd64865 59df8caec8e28f1dd238c2f59fdb02854b51da69b0bc1a18271c502a9a166295
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /js/rlottie-wasm.js HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/js/tgsticker-worker.js?14
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:47 GMT
content-type: application/javascript
last-modified: Tue, 14 Jul 2020 22:03:36 GMT
etag: W/"5f0e2bb8-188f9"
expires: Tue, 23 Apr 2024 16:45:31 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3615
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9vyu7%2FbzPOv86%2BVcPieB%2BtE3NigzW4jLGI%2FR92KE1jJQA1vzdD2OyvR0gHw2GKyxgNTkuwXRXuH8B2TB2FHkzRM8ZpQjD9Px5Aco4VIk8umzbDsogp2GwtIcKsfGHJYqJZ76VlA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d4ceac56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/file/464001418/1/fabnJFzygPY.17422/bc9dec9fd8bd26e00e | 188.114.97.1 | 200 OK | 17 kB |
URL GET HTTP/3hiddify7.starvp.ir/file/464001418/1/fabnJFzygPY.17422/bc9dec9fd8bd26e00e IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/js/tgsticker-worker.js?14 CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
Hasha704cf1cbf15ecdf5c0cbfa12c378c35 93fb27247e0c2b0bf2b743c50546f30064da8d59 385bf7738f21e33acf771059523b2e932632d470059c412ede657ab5475c46a5
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /file/464001418/1/fabnJFzygPY.17422/bc9dec9fd8bd26e00e HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/js/tgsticker-worker.js?14
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:47 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 17:45:47 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4CDxGC6eE8vTcwYjDdt%2BnNz9rOyA1jntnxwthy3DF%2BzHbMr2se%2BXTDgThF3phGfQUjicfbKdHZCoxiGNS5V9iO9jN0yMYOlD776ZVfAPTm3kEK%2FtQMyQN5Xk29F7lnBLF574HI0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb5d89a7a56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/file/464001493/2/hV6uPcaHk_E.17388/dcccb066a7b4fe44ee | 188.114.97.1 | 200 OK | 17 kB |
URL GET HTTP/3hiddify7.starvp.ir/file/464001493/2/hV6uPcaHk_E.17388/dcccb066a7b4fe44ee IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/js/tgsticker-worker.js?14 CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
Hash9bba487827d44a5e1dddae363b076ec3 54d60a7451c95255669419fca423a32b648f304e 59da70d661b339233c215878af03e9257353024e72bbd16f7848aaf7525af293
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /file/464001493/2/hV6uPcaHk_E.17388/dcccb066a7b4fe44ee HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/js/tgsticker-worker.js?14
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:47 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 17:45:47 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HcS%2FsYp2kkZfdC5htMO6IpFlJ8zKml2aesvmiE%2FcExHD59RplkqOsVn%2FU5sem%2BHo%2BjHekoBotEL%2B%2FG52mHuQo7oPTl40cn1HbCKCGiE%2FKz1aIwRDhC%2BIZH9j%2F1RHHsZsAGlJC3I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb5d8aa8b56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/css/bootstrap.min.css?3 | 188.114.97.1 | 200 OK | 42 kB |
URL GET HTTP/3hiddify7.starvp.ir/css/bootstrap.min.css?3 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeASCII text, with very long lines (42164) Hashc2656e265ef58a9cc9f4b70b15da5fb9 85c5ebdb89d4574d72688c2650d4b84b9b09770a f1d083ffaa644c708f11db29707aa57c19246e6d32643b03fee3f82c17b224b3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /css/bootstrap.min.css?3 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: text/css
last-modified: Fri, 10 Nov 2017 17:54:14 GMT
etag: W/"5a05e7c6-a61b"
expires: Tue, 23 Apr 2024 12:25:11 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 19235
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wzFTC1DSKof8FEQKdO%2FCPp4jTB3A3z9kMIa6mYB2RE0qh6UJWburshcqzgN16VSHEaVxiTbR011F6tWSZfIhk4fg0AnK1T2yuYfkw7l7PRhv5rpRTt7k4EJGi%2FZaqct7P6TkHy4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d25c2856a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/file/464001897/3/f0Go0rLpEwk.11343.png/dd4eeb46cc5efc0688 | 188.114.97.1 | 200 OK | 11 kB |
URL GET HTTP/3hiddify7.starvp.ir/file/464001897/3/f0Go0rLpEwk.11343.png/dd4eeb46cc5efc0688 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typePNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced Hash4e06d87c860ba8e8a804350f42632217 31d3f89ae95d6f25660020b21e49114aaecfdd59 6b081cb199e67a43ddcd7ddac0b528c93cc72bb82641937368a41b0aece43125
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /file/464001897/3/f0Go0rLpEwk.11343.png/dd4eeb46cc5efc0688 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: image/png
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 17:45:46 GMT
etag: W/"183936b397813281d8de1b217deb5c565bde1c5b"
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BxnCIRYFjQ5llC1o0SU7j4G4vfM5DBj%2BiZAciR%2Fi6O7EAZxkupmftUaRBbl4mxQFGtkCuSFwXueq%2Bzkuile6x8TSThs%2F6tSYiyFBR7lnfUr4hQgxygOS9omnqH7xvjcLNacs2OU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb5d25c3356a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/img/website_icon.svg?4 | 188.114.97.1 | 200 OK | 1.9 kB |
URL GET HTTP/3hiddify7.starvp.ir/img/website_icon.svg?4 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeSVG Scalable Vector Graphics image Hash5caca7ae1cffb3da0b06150a15020005 04cfb934f238d33209406393a3fbf78454815739 1ea747a06fbc240c2594a8c523cb248bbda4784f0fcad9d0f06334f1a378604f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /img/website_icon.svg?4 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:47 GMT
content-type: image/svg+xml
last-modified: Mon, 20 Jul 2020 20:41:37 GMT
etag: W/"5f160181-768"
expires: Tue, 23 Apr 2024 16:45:32 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 3615
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XNWyppxjOGQu49tSGwHcRUtWdwDkXJSAd0TdJAaE2qQB2Dae5GJSFM4ekUF1Q7N7OTx0nh%2FvyFEUIOlTGRIfws3SOAewiFJiXpg717jrVMXJIcsTt6GSb5TVjcvM6OLFc%2F6aU2Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d50edb56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/file/464001132/3/-1qvqKPZsQQ.17975.png/7d57d7159cf4fbe9b2 | 188.114.97.1 | 200 OK | 18 kB |
URL GET HTTP/3hiddify7.starvp.ir/file/464001132/3/-1qvqKPZsQQ.17975.png/7d57d7159cf4fbe9b2 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typePNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced Hash1d581b72d19bc828654229a0773a5300 ff517c8bb4b37351ff3dd72f7ec66fc584e90d5c d2b3858e94ed122782de9028f668334438649e46e5d2c6d761e3359c8e3de200
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /file/464001132/3/-1qvqKPZsQQ.17975.png/7d57d7159cf4fbe9b2 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: image/png
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 17:45:46 GMT
etag: W/"fa9a38332023332be262ffbb44b3d98e6ed68a45"
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zqJOCorB9AfsOnp6lrkZ3bp5ddZ1ogAff%2BRCLBLup6JsDaAunT6kDsmtdKbsB11MVjIMWCd10eMo8X1J1ZNDe9w7rD5KNalG%2FSZc2Hb16vWYZ5%2FTl3%2FPkoVBeb%2BKKYMH5yFHUqQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb5d25c3b56a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/file/464001166/2/FzTl8_M5mQA.19325.png/b6c5dbc0e4f6553805 | 188.114.97.1 | 200 OK | 19 kB |
URL GET HTTP/3hiddify7.starvp.ir/file/464001166/2/FzTl8_M5mQA.19325.png/b6c5dbc0e4f6553805 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typePNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced Hashda1ff638a4141eed84327e20f936496f 91e5410531539b53c3aefcc5774413e8a665a57a b66de388c12d6611870503c34c5db37fe079313c4292177435fd8dc7ed6cbe67
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /file/464001166/2/FzTl8_M5mQA.19325.png/b6c5dbc0e4f6553805 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: image/png
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 17:45:46 GMT
etag: W/"2690d1e344526d5a2fb08060299f2697537643ae"
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YBSub7btDwZzvz93fglL5UhtIcqP7Ij3EkUHktc65lC7tcSAZH1G4F4gDguLfzc%2BSw%2F8AUGwCLzknkA3rPt%2BIIGtJK1zfyVU2lwWELLRiORZXD6VXYJ8IYnbyZpiG15HN3GXnVs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb5d26c5856a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/file/464001880/2/VGTLBN3QuYM.10959/8940838e7dddc787d8 | 188.114.97.1 | 200 OK | 11 kB |
URL GET HTTP/3hiddify7.starvp.ir/file/464001880/2/VGTLBN3QuYM.10959/8940838e7dddc787d8 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/js/tgsticker-worker.js?14 CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
Hashff7e11dfac94a04a530bde1952f9f555 27b7510fef061196c3e14f9cad1b385cb42e73c2 ee05dd6a035bc279c893bf87ac3242f2109e084f72aa243935406da83cac5ab6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /file/464001880/2/VGTLBN3QuYM.10959/8940838e7dddc787d8 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/js/tgsticker-worker.js?14
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:47 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 17:45:47 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AvDvbOTd2kB9y%2BkpYXE5zo4k1YM2LtKhtVIMlU1QIbN2wl8EfKoomszoiIKYTWxPvqlcK9wsxwuv%2F7MBQ6liSOYbGSv5d8wGkFesC3FvOnMbz9xM%2FD2SP%2Fju9crKESaVMn3vmhI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb5d8ba9656a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/file/464001166/1/01aTJ2ISKeU.21801/24028c7b6d07639794 | 188.114.97.1 | 200 OK | 22 kB |
URL GET HTTP/3hiddify7.starvp.ir/file/464001166/1/01aTJ2ISKeU.21801/24028c7b6d07639794 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/js/tgsticker-worker.js?14 CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
Hashb7800e8172d57f9d4e1b2bcf649fee38 07ed81dfd34093dfab4c1365a6fa9e3d99fcf057 5c382c842d0525b5034a4f4c302f32ecda276d29d4eafdfb27011daed5d35390
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /file/464001166/1/01aTJ2ISKeU.21801/24028c7b6d07639794 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/js/tgsticker-worker.js?14
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:47 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 17:45:47 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KiyX%2B8%2BEpX8YbZhpI9eNTgsdvUl8O1gLsJ0HTYz00e1UCD15wsgy4NMXOJ1FUlzuLXo%2FDpQapodYulLi%2F84rt2kZAeXivfzg%2FHVVvVCVA38wcj2z712aO8P%2BNm4YG6vsAXJUbHA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb5d8baa256a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/file/464001560/2/n7EACfx4FPY.16465.png/7318c11715aa2ec45b | 188.114.97.1 | 200 OK | 16 kB |
URL GET HTTP/3hiddify7.starvp.ir/file/464001560/2/n7EACfx4FPY.16465.png/7318c11715aa2ec45b IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typePNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced Hash77ffe8b3dff795ea0734bf4b35a94357 2d545ffb0877993dd227d528638a336cd3b9e32c ad37907e335e7c5d2692b682401f4520753ab539fadedf74962c6a004b3a179f
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /file/464001560/2/n7EACfx4FPY.16465.png/7318c11715aa2ec45b HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: image/png
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 17:45:46 GMT
etag: W/"ad24af7a174e71673b28f7e827a85934048a9cd7"
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4dmZCRA%2BmEtE17ziUXFp1qMJwcq6%2BlGCAhU0wppvIsDQaxW%2FobhDFGg%2BK%2F3oFM04ahvCp2LTYZ3DnH4%2BLG%2FmzWmbsqfWeL1mZf9KpOPl8ilkrtyr7YWiZ1uGshqjjyW8h22F%2FFg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb5d25c3956a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/file/464001828/11e9a/1yY7a721t4o.30567.png/e113973dae2bee508b | 188.114.97.1 | 200 OK | 31 kB |
URL GET HTTP/3hiddify7.starvp.ir/file/464001828/11e9a/1yY7a721t4o.30567.png/e113973dae2bee508b IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typePNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced Hash0c6c45ee2597151fa5e955d11d2d38fe 771aa6bbe2765cd2d6f754e14d5e12ffc476e939 889ddfb8550bac935b0a02e52bef9d0950f0734d7a70661a0930a3d8e6a2f372
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /file/464001828/11e9a/1yY7a721t4o.30567.png/e113973dae2bee508b HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: image/png
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 17:45:46 GMT
etag: W/"a30234722b2883f211eb0bad5c73c2ef2fe73a53"
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s6X7j41VmVKr8LsKPrH9%2FWIepTgHJC05wH5ZKiegeqWMiGLg2qYlgoStKbafPrJdURjMc%2FXJ7Lctzp%2B0fbY%2BEf6xNxLz%2FGnTNY9ktndI222C21NSFslEIWUSfcwB3T0OSl2Bqd8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb5d25c3f56a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/file/464001880/3/xOpm7ohoHQ0.12690.png/feb1e161b1d3608613 | 188.114.97.1 | 200 OK | 13 kB |
URL GET HTTP/3hiddify7.starvp.ir/file/464001880/3/xOpm7ohoHQ0.12690.png/feb1e161b1d3608613 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typePNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced Hash9c2a194ee50807ae9342b60634be2445 553dfd2ba2a5e11468a3b57aba897995f2f4d676 ec1788bcdd05595bbcd16e5c7c13bce6481b620ebbc4200b2e6598c02c82aa78
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /file/464001880/3/xOpm7ohoHQ0.12690.png/feb1e161b1d3608613 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: image/png
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 17:45:46 GMT
etag: W/"9b666309f437dfb32688ee016a9904703de41927"
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3T7hzgnUPRtffGtxFloAjMY8GmjaXJkwt3HGJyfwHpYcep2bQmfV7PEJ8d2tyade%2B26KUp%2B7wWzVsPTqLUbC5bpY9bi1FPOW9Cz1glHdUE1XHIEtacUZY4kwN%2BA4UcsrhRz6jlI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb5d26c4656a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/img/SiteIconAndroid.svg | 188.114.97.1 | 200 OK | 999 B |
URL GET HTTP/3hiddify7.starvp.ir/img/SiteIconAndroid.svg IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeSVG Scalable Vector Graphics image Hash31405dbd62c5f9572b4068a257b62a37 a09bf3a1547f5a817342ad9e57e25f4b74547cb9 e709211820b0f8728500fe3a47430ec8699fcab2908809a84f1d47ec7418c261
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /img/SiteIconAndroid.svg HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/css/telegram.css?236
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: image/svg+xml
last-modified: Mon, 18 Apr 2022 20:19:52 GMT
etag: W/"625dc7e8-3e7"
expires: Tue, 23 Apr 2024 16:45:31 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 3615
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZkNGbhRcqOAo63S7jcwEUxgc9EBgqLt0pLvbN6SRtl66YYRK0imZg5JXo7IFxuHoEpQ1Pkq8ysMgXzWWw3bgx23ly22WAtk4a1WYWnOJ0bDsLKckJO9qduP8doP3QZ2e6kLM3tg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d2ccaf56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/img/SiteIconApple.svg | 188.114.97.1 | 200 OK | 443 B |
URL GET HTTP/3hiddify7.starvp.ir/img/SiteIconApple.svg IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeSVG Scalable Vector Graphics image Hashb0bd9d05008808e2fb081716c35d1e09 b1da366b45b2a88fe41b960c52bd013208cf4ee5 4e2e3090121394e28ee59c238ffd4da4e3956eaad206f6999695c2f539a4d516
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /img/SiteIconApple.svg HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/css/telegram.css?236
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: image/svg+xml
last-modified: Mon, 18 Apr 2022 20:19:52 GMT
etag: W/"625dc7e8-1bb"
expires: Tue, 23 Apr 2024 16:45:31 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 3615
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w4wCj1p1s8Zv0DHiR%2Fi9CZa42FED5sWJKu46NfbO%2F2CPV2iHjdUU3J0dQ5s7si836P94sehgZkC7GV58zh3Gdi11795tPVHn%2FD0%2FSAC1CmOicuxMFIt%2BWRe4WtRZiUGZLFmm5%2FY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d2ccb456a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/js/pako-inflate.min.js | 188.114.97.1 | 200 OK | 23 kB |
URL GET HTTP/3hiddify7.starvp.ir/js/pako-inflate.min.js IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/js/tgsticker-worker.js?14 CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeJavaScript source, ASCII text, with very long lines (22681) Hash8e548b1ad991b0cd636a7e4939e3c420 ffacc63c9b5d77b0597f9c054ca349312626a5fe 2ca27e9a8dae569cdeac42752ed1aed1afeff7f19282d3cc12c0aaa54a08bc04
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /js/pako-inflate.min.js HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/js/tgsticker-worker.js?14
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:47 GMT
content-type: application/javascript
last-modified: Fri, 04 Oct 2019 11:37:17 GMT
etag: W/"5d972eed-589a"
expires: Tue, 23 Apr 2024 16:45:32 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3615
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ibAvpqH7r9dV4PDir2DdVn8hQTCSt4r0jQz%2B9qPg5GHZ%2Fsf5udNbS6kmEpIXgnqP7q59%2BgLVBPN1o1s%2Fi4OPUJ7xTve828mynhDq07be%2FUQ1irwbVqCZeFRDVKD3cKFv4gPqJSs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d82a2956a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/js/pako-inflate.min.js | 188.114.97.1 | 200 OK | 23 kB |
URL GET HTTP/3hiddify7.starvp.ir/js/pako-inflate.min.js IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/js/tgsticker-worker.js?14 CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeJavaScript source, ASCII text, with very long lines (22681) Hash8e548b1ad991b0cd636a7e4939e3c420 ffacc63c9b5d77b0597f9c054ca349312626a5fe 2ca27e9a8dae569cdeac42752ed1aed1afeff7f19282d3cc12c0aaa54a08bc04
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /js/pako-inflate.min.js HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/js/tgsticker-worker.js?14
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:47 GMT
content-type: application/javascript
last-modified: Fri, 04 Oct 2019 11:37:17 GMT
etag: W/"5d972eed-589a"
expires: Tue, 23 Apr 2024 16:45:32 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3615
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=69XPHvl1RShU50aQJuX7xc8FcUb1fq2id1JrZuDfwe6cO7RFjRiYOUKkQqbGUEsUqozaoghB%2Fq9qNFAAgXk4xU9eY2Gfq5s6HuV16PdHwAx3l5tYpEzT4DjR%2FZ6MItKYK5L8ttc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d83a3256a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/js/tgsticker.js?31 | 188.114.97.1 | 200 OK | 25 kB |
URL GET HTTP/3hiddify7.starvp.ir/js/tgsticker.js?31 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeJavaScript source, ASCII text Hash1400a5f5bb460526b907b489c84ac96a 1cdb62d2b39eff966e96a476f72704bc86591036 42d42f23d7276824168808093be0f20e3e53673718c79349cc22da88f58d3e23
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /js/tgsticker.js?31 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: application/javascript
last-modified: Wed, 29 Mar 2023 11:31:32 GMT
etag: W/"64242194-601c"
expires: Tue, 23 Apr 2024 16:45:31 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3615
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rxwS%2BUYXVjl7Ld48365AVEC8nlGJ2lk3E%2BChsVtPMemMbcIO8kSb83OpQmlovzK2fuGJ0ZoLJFGg1gM1r2c%2BLCnfI%2FQ6WPkv5qzHdlempwhmBqw6b8pAmmLNZTpmpxXolINaKZQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d27c6856a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/js/rlottie-wasm.js | 188.114.97.1 | 200 OK | 101 kB |
URL GET HTTP/3hiddify7.starvp.ir/js/rlottie-wasm.js IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/js/tgsticker-worker.js?14 CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size101 kB (100601 bytes) Hash9b31c5083355b2aaaaaec512f3a0021d 395c9925e89a0ae66f0e016ae664c0aabfd64865 59df8caec8e28f1dd238c2f59fdb02854b51da69b0bc1a18271c502a9a166295
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /js/rlottie-wasm.js HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/js/tgsticker-worker.js?14
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:47 GMT
content-type: application/javascript
last-modified: Tue, 14 Jul 2020 22:03:36 GMT
etag: W/"5f0e2bb8-188f9"
expires: Tue, 23 Apr 2024 16:45:31 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3615
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RVI2M0j%2FN3RsGeC0rF0Ix%2B6gtXJiUGKJ79JrNnW4HEnYXWyFoNfinZXcea0lED3lOn66Eemn%2F6V9WKcS1IQqYi6p0CKutm2keYXKtpVbxN7SD%2FrWTsLW%2FdUFgQrqFOsXR2gDyYo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d7e9ba56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/file/464001484/1/bzi7gr7XRGU.10147/815df2ef527132dd23 | 188.114.97.1 | 200 OK | 10 kB |
URL GET HTTP/3hiddify7.starvp.ir/file/464001484/1/bzi7gr7XRGU.10147/815df2ef527132dd23 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/js/tgsticker-worker.js?14 CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
Hash54d5a4d4df087918c0b548eaeb0e0b56 f85aed693897891b41105668c9297ed737b0b21e 535b39393a255eec77eb8d75cd75eef87fc11a61e4ff8dd11e50ea2b846c363a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /file/464001484/1/bzi7gr7XRGU.10147/815df2ef527132dd23 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/js/tgsticker-worker.js?14
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:47 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 17:45:47 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jNfkjFV%2BOXQDX121e3QjXfNtKShWAUYV9jVjANuwYe%2B9zfVEdBF4a0iF2ykRHOAag9dfA%2B%2B66x9pNGt9u07qFJPW5Jf98LS5RWjUAgJWMjvy3rzGrQ62%2F45vpbNate9m0yMWrFg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb5d8aa8756a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/js/pako-inflate.min.js | 188.114.97.1 | 200 OK | 23 kB |
URL GET HTTP/3hiddify7.starvp.ir/js/pako-inflate.min.js IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/js/tgsticker-worker.js?14 CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeJavaScript source, ASCII text, with very long lines (22681) Hash8e548b1ad991b0cd636a7e4939e3c420 ffacc63c9b5d77b0597f9c054ca349312626a5fe 2ca27e9a8dae569cdeac42752ed1aed1afeff7f19282d3cc12c0aaa54a08bc04
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /js/pako-inflate.min.js HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/js/tgsticker-worker.js?14
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:47 GMT
content-type: application/javascript
last-modified: Fri, 04 Oct 2019 11:37:17 GMT
etag: W/"5d972eed-589a"
expires: Tue, 23 Apr 2024 16:45:32 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3615
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cRYtA7IMnFXJD1PGJIC1SBtwxJ%2BouRb2bQXRhdgD6nYOROpEDOpsrDJRY%2BACDeNPlIKErrkI9EeZP8jKS%2BqvRYgQjQByXdLna%2B6S0AqnGzeQOyu78EZpS%2BoJjJiiMgrAOa8fcQ4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d52ef356a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/file/464001828/11e99/2FUYW30UXAI.12708/7604effa1e02ddf7f9 | 188.114.97.1 | 200 OK | 13 kB |
URL GET HTTP/3hiddify7.starvp.ir/file/464001828/11e99/2FUYW30UXAI.12708/7604effa1e02ddf7f9 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/js/tgsticker-worker.js?14 CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
Hash2b925bdf9d9771be39212e078be5b7fe 91c7d63a861e9d1be9acaf52e23bef8cdb240885 5565c6e45a20132e2d1e263ee2be585376c2c64dd39d9aa6552c37ecd36c7a46
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /file/464001828/11e99/2FUYW30UXAI.12708/7604effa1e02ddf7f9 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/js/tgsticker-worker.js?14
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:47 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 17:45:47 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oznc%2BIAe6uRdBFWlJLbOaogQ5H5YZaujRrCtQg1ipeTh93U2wh5o%2F4FMy2FiRiBRSZCpgDHf07G4pWgGhL61rkmJ2CcJ5suOcy48D8bkmC74dIYg9XGzigS00qHjO5QiIDyAXAE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb5d8ba9956a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| | 188.114.97.1 | 200 OK | 20 kB |
URL User Request GET HTTP/2IP188.114.97.1:443
CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET / HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: text/html; charset=utf-8
set-cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259; expires=Sat, 20 Apr 2024 04:52:26 GMT; path=/; samesite=None; secure; HttpOnly
pragma: no-cache
cache-control: no-store
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sid%2FsF9mC94u6jJNKlzE9wxw%2FsiXadqkwjZJPKpMLatJB4dwkYLnG4oKaYzTFXFIXRyVt3Fg2EmQvfhioLDEyQBpRZ%2BF7le62dDzFsE1PqWo0beR%2FFH%2BWQYuemPrjaCI4RUCPvg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb5cfecafb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| hiddify7.starvp.ir/js/rlottie-wasm.js | 188.114.97.1 | 200 OK | 101 kB |
URL GET HTTP/3hiddify7.starvp.ir/js/rlottie-wasm.js IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/js/tgsticker-worker.js?14 CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size101 kB (100601 bytes) Hash9b31c5083355b2aaaaaec512f3a0021d 395c9925e89a0ae66f0e016ae664c0aabfd64865 59df8caec8e28f1dd238c2f59fdb02854b51da69b0bc1a18271c502a9a166295
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /js/rlottie-wasm.js HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/js/tgsticker-worker.js?14
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:47 GMT
content-type: application/javascript
last-modified: Tue, 14 Jul 2020 22:03:36 GMT
etag: W/"5f0e2bb8-188f9"
expires: Tue, 23 Apr 2024 16:45:31 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3615
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WQVvRPz6CQU1Zthm1VTKWBhY7NJRWXOvRbQSf%2BIqRCd8B%2FeXABJkj%2BtbvLlYNqAjmkhml72J%2FoVDfbQOUqUr0Vn57oeeqde7o%2Bu5dEUScfA7vPUD25KFenpnPHwpji3q4fhQwAA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d7e9cd56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/css/telegram.css?236 | 188.114.97.1 | 200 OK | 115 kB |
URL GET HTTP/3hiddify7.starvp.ir/css/telegram.css?236 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeASCII text, with very long lines (1267) Size115 kB (114867 bytes) Hash0d209d756face073dd14a437f07e58b2 20cb9119fdd02921a6bd0b1500f78a0b76a7a5c0 acd326a9263ee8c4cbc757fed46333732a0e3f8f48d398cbd4f8e36a09fdaf76
GET /css/telegram.css?236 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: text/css
last-modified: Mon, 20 Mar 2023 10:58:55 GMT
etag: W/"64183c6f-1c0b3"
expires: Tue, 23 Apr 2024 16:45:31 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: HIT
age: 3615
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jw63yKE1BKDuhmthOulY4jVKO86wnZxrZVI4OkX5kESiuBe5ROeTiKJPDmwBp%2BXdd0djfXFNpc6sgxQFfh1v4h2AetQIU8osHbN1AmmwCMUsVUKni8B8y4RyWCFh%2ByuNNPSeof4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d25c2c56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/img/t_main_iOS_demo.mp4 | 188.114.97.1 | 206 Partial Content | 245 kB |
URL GET HTTP/3hiddify7.starvp.ir/img/t_main_iOS_demo.mp4 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typeISO Media, MP4 v2 [ISO 14496-14] Size245 kB (244748 bytes) Hash91daa37e09df8b688f7832e7d6d80aa6 fc59e29275e98dd5dce1efc9b982ec1ba5ad4276 eaf99fdddbab6953d53df2a7e81b5275e90e221e0a7ebd3d99f42cf4b6aba6d2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /img/t_main_iOS_demo.mp4 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 206 Partial Content
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: video/mp4
content-length: 244748
last-modified: Sat, 09 May 2020 18:58:54 GMT
etag: "5eb6fd6e-3bc0c"
expires: Tue, 23 Apr 2024 16:45:31 GMT
cache-control: max-age=345600
access-control-allow-origin: *
cf-cache-status: HIT
age: 3615
content-range: bytes 0-244747/244748
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i2A3kC8oSQM6CYT%2B1ytx7D8LerFbq6WfJnP10hEYTQ%2BlxWhwzInRnXhrO3UxEIumGRSChgHmJ3bm4M9UHgYnuCY%2B7%2Fw6PoFerOGxkKsExNUIKetxIdZ46k5rPOU%2FYV7xIy4XMpM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876eb5d42e1a56a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/file/464001812/2/kLAK2TPyvUU.12545/f68c1caf735a2ea3db | 188.114.97.1 | 200 OK | 12 kB |
URL GET HTTP/3hiddify7.starvp.ir/file/464001812/2/kLAK2TPyvUU.12545/f68c1caf735a2ea3db IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/js/tgsticker-worker.js?14 CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
Hashf6f5592c70d3e2ef30197fb425ca125a 8d17f7f161a17147a94b3500fa091cb99b423979 2a71a429a71ebf641d8edb174ac3997cf74b6e6019b6d80e32d179913327a4fe
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /file/464001812/2/kLAK2TPyvUU.12545/f68c1caf735a2ea3db HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/js/tgsticker-worker.js?14
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:47 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 17:45:47 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cbbPd8q5pecf9qRBjCFb8TXgeoYeC4Ek9ja0oC75bH5FiL969h78IRxxpkghgEaFwJI05CmGGqFh1NcMT0oBrJSx9wUD2rHSDNSoiV8jsOtXmItlGraPtMJromzVZKJAFASVYBI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb5d8ba9c56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/file/464001453/3/mNzXWC3RX0c.15740.png/9ce5fa5f3fb74460b4 | 188.114.97.1 | 200 OK | 16 kB |
URL GET HTTP/3hiddify7.starvp.ir/file/464001453/3/mNzXWC3RX0c.15740.png/9ce5fa5f3fb74460b4 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/ CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
File typePNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced Hash4e59e61b2a0205e09dafad24da174530 0dc2adba2fbe4f1cd195364ef4f1ab4dc1641993 269f20eb63db3ece8035886ebc69112ef94339da867d47f815237800555e508a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /file/464001453/3/mNzXWC3RX0c.15740.png/9ce5fa5f3fb74460b4 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:46 GMT
content-type: image/png
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 17:45:46 GMT
etag: W/"9663b372030cf4b80b2b7ab98f8e689847388957"
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u1NB4Dd4VVqdQXMl4oD4u5zaSwgNWQ3oxa0T1si1hb2Q6kBdutULiswphYAGa%2BXu1brxXpH6yUuwQU0ZVAolQa0ukoT7hNXVrLO7xZWgtb%2FAhQmwhHL6HpRKhS7ly%2FL7gjqWoos%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb5d26c4a56a8-OSL
alt-svc: h3=":443"; ma=86400
|
|
| hiddify7.starvp.ir/file/464001560/1/zLlKYgeDLoA.14496/62085b07461f2d87e4 | 188.114.97.1 | 200 OK | 14 kB |
URL GET HTTP/3hiddify7.starvp.ir/file/464001560/1/zLlKYgeDLoA.14496/62085b07461f2d87e4 IP188.114.97.1:443
Requested byhttps://hiddify7.starvp.ir/js/tgsticker-worker.js?14 CertificateIssuerGoogle Trust Services LLC Subjectstarvp.ir Fingerprint73:BA:9C:DB:EC:16:35:40:1E:E0:95:2C:2B:A7:49:65:45:58:D1:9C ValidityWed, 27 Mar 2024 18:07:24 GMT - Tue, 25 Jun 2024 18:07:23 GMT
Hash50793508d686b6854ac38000a589a684 742bb61fbb1320a839a88f89b148f7adf7099961 d89665cf5ad6043ce4c1229e39bc84a26dcac2229fee3deaa32fb0658926dc66
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /file/464001560/1/zLlKYgeDLoA.14496/62085b07461f2d87e4 HTTP/1.1
Host: hiddify7.starvp.ir
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hiddify7.starvp.ir/js/tgsticker-worker.js?14
Cookie: stel_ssid=d6b1b01de75114617b_15079312963080771259
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 19 Apr 2024 17:45:47 GMT
content-type: text/html; charset=UTF-8
cache-control: max-age=2592000, public
expires: Sun, 19 May 2024 17:45:47 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s1JWSiH2Ipyn5rc9F%2FgzsnJh5Aq126xUkVHzx3CbaKEJgf6wKnAHshIlMV5cwb7P%2B9eAhFHmtwYVfoc3y9xbpkB0qRJosMNfHLh9yRvUe1kUeIWQDMO4Aa6m0kxNkgDRlJofoaI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 876eb5d89a7d56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|