Report - cheapgiftcerts.com/

Report Overview

Submitted URL
cheapgiftcerts.com/
IP
156.254.108.60
ASN
#0
Submitted
2022-12-06 22:46:39
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
56

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	52.37.79.227
cheapgiftcerts.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	658 B	3.9 kB	156.254.108.60
api.share.baidu.com	44629	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	332 B	114 B	182.61.201.93
ocsp.globalsign.com	2075	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	359 B	1.9 kB	104.18.21.226
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	60 kB	34.120.237.76
hm.baidu.com	8254	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	990 B	12 kB	103.235.46.191
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.7 kB	7.1 kB	23.36.76.226
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
www.telegraum.xyz	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	12 kB	5.3 MB	154.82.100.171
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682 B	1.6 kB	93.184.220.29

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed
2022-12-06	medium	telegraum.xyz	Sinkholed

JavaScript (12)

	URL	Size	First Seen	Last Seen
	www.telegraum.xyz/js/config.js?v=20220830	1.3 kB	2023-03-08	2023-03-08
Pretty URL www.telegraum.xyz/js/config.js?v=20220830 IP 154.82.100.171 ASN #399077 TERAEXCH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 20:31:56 Last Seen2023-03-08 20:31:56 Times Seen1 Hash 0e076b31186f27dc6b024a5ed01f40af b4f3579061527b3c14dc6c26ba1629bb889bd4c9 af68f24e9d888a37778e1cc4c4d0f541273132d468232e60e15a754b1f87390a Loading...

	www.telegraum.xyz/	331 B	2023-03-08	2023-03-08
Pretty URL www.telegraum.xyz/ IP 154.82.100.171 ASN #399077 TERAEXCH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 20:31:56 Last Seen2023-03-08 20:31:56 Times Seen1 Hash faab2982055fdd91f7981a13584225cc 62fe0ab2573b58647ee6bdd29946f718ed3ce305 7c0bca2a00b37904211aa5ee1ed74c2d409e0a161840bf3e4170c651e7448a00 Loading...

	www.telegraum.xyz/TG_EN/Telegram%20Messenger_files/main.js	21 kB	2023-03-08	2024-04-26
Pretty URL www.telegraum.xyz/TG_EN/Telegram%20Messenger_files/main.js IP 154.82.100.171 ASN #399077 TERAEXCH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 19:42:25 Last Seen2024-04-26 05:43:44 Times Seen1748 Hash 401f247640476ab57f1562643278c690 88d3d9ce942bc4f83013a1f302fa57281c62dbd8 39a10a24888c4e0898d8c9c9ed332d88d0203c08d0f5cfbbf82c84cd9eee584f Loading...

	www.telegraum.xyz/js/download.js	42 kB	2023-03-08	2023-03-08
Pretty URL www.telegraum.xyz/js/download.js IP 154.82.100.171 ASN #399077 TERAEXCH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 20:31:56 Last Seen2023-03-08 20:31:56 Times Seen1 Hash 84cc838c2b55541a8dfeb2bee37124ce 62a351bb5407c2507a25ce20acf842395afe6f40 aa2a62ac9ad3ad37b604cf3dc7135092d01e27507f967f60bc156ab2e35dd552 Loading...

	www.telegraum.xyz/TG_EN/index.html?20220830	273 B	2023-03-08	2023-03-08
Pretty URL www.telegraum.xyz/TG_EN/index.html?20220830 IP 154.82.100.171 ASN #399077 TERAEXCH Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 20:31:56 Last Seen2023-03-08 20:31:56 Times Seen1 Hash ead4baed4ba93ab86a373b190e425f71 97697d671c6344f6735a5acb85804a533e26d593 3d8e6750725f3dc068a5d6ce7edc9df4b106d6f30aa3b2e385e8932f21fc72ed Loading...

	cheapgiftcerts.com/	1.3 kB	2023-03-08	2023-03-13
Pretty URL cheapgiftcerts.com/ IP 156.254.108.60 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 19:41:11 Last Seen2023-03-13 10:37:51 Times Seen1 Hash 8cfd951b687ba27783cd38041d5b8249 5e25eec92c372549791901f63f9c247931ce80ad 2680f4373f51175e3321c4411cdc06f35d1f576d381c7c685e3b392cbc30f117 Loading...

	cheapgiftcerts.com/	1.7 kB	2023-03-08	2023-03-08
Pretty URL cheapgiftcerts.com/ IP 156.254.108.60 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 20:31:56 Last Seen2023-03-08 20:31:56 Times Seen1 Hash e8f9d29256b3e44a4c16f0ccee908efd 7a1af5f5897288da30025ee5c8596ce2b5c9f722 f41e22900f04fe392247168e23b2be41abb5b08db4778f3a4628787bb911cd33 Loading...

	hm.baidu.com/hm.js?cb4fa3f500841e7151657fdaf714cb48	30 kB	2023-03-08	2023-03-08
Pretty URL hm.baidu.com/hm.js?cb4fa3f500841e7151657fdaf714cb48 IP 103.235.46.191 ASN #55967 Beijing Baidu Netcom Science and Technology Co., Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 20:31:56 Last Seen2023-03-08 20:31:56 Times Seen1 Hash 6481e29903664a7bb56d88057aabb9a2 757ee8de897c511b8ef6c214a6327034f65261a9 72a22f47c3782da201a41a5d165d2f4b75affa0b7d4e8f11b7eb40c2a8c1a1ac Loading...

		Size	First Seen	Last Seen
	#1 Write - d93e1215cff5d4c42f64c8a02d06a514	67 B	2023-03-07	2023-12-14
Pretty Observations First Seen2023-03-07 12:08:41 Last Seen2023-12-14 20:53:07 Times Seen231 Hash d93e1215cff5d4c42f64c8a02d06a514 671e0c1de9f4e74f7cfa0854d62318b248843410 53ba6a10d65d00e320337485745f6ee955db6063e284688629231212a461f32f Loading...

	#2 Write - baf5f85095fcf851f46bbb6c15a3eda1	105 B	2023-03-08	2023-03-08
Pretty Observations First Seen2023-03-08 20:31:56 Last Seen2023-03-08 20:31:56 Times Seen1 Hash baf5f85095fcf851f46bbb6c15a3eda1 cde119994d14c4e225c10329042efacf5a0c9a44 9ebadd71445472aea60a9019d6f7efa5d9a30b7f41328cfc78cf998900b43241 Loading...

	#3 Write - 978cf4ebea4905ee74647da257c32b21	11 B	2023-03-07	2024-04-25
Pretty Observations First Seen2023-03-07 12:08:41 Last Seen2024-04-25 13:54:32 Times Seen315 Hash 978cf4ebea4905ee74647da257c32b21 f2a9a3f2bf9282ee51e5e40139ebeb33c0a2b660 0f752c743aa4658752caa563ab21cd6c27531768ea1842812e37b86d543cffac Loading...

	#4 Write - 18377c5b5aaee76a37ec7417fff41731	52 B	2023-03-08	2023-10-14
Pretty Observations First Seen2023-03-08 20:31:56 Last Seen2023-10-14 03:33:34 Times Seen113 Hash 18377c5b5aaee76a37ec7417fff41731 aaa320df033ca923f5753576797ffc1cee57b030 03f0d3415ecf321f6e0e3efb84d93454956249b7c0030c46c7f229b8c99a93ae Loading...

HTTP Transactions (55)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5ceaca9fd4ad000cb435820812fc69c8
8168397aaf7b572c89a9c83f46c0b65e4ac509f2
9c4e52e7e17158307d752db0bc3d1fbedae4f305cc301fd73b260f73ab796492

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3916
Expires: Tue, 06 Dec 2022 23:51:44 GMT
Date: Tue, 06 Dec 2022 22:46:28 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
f83c5e33ba42e312ee398848bbb711f5
caa1fd23b1fbbe883292ded04404c1cfd861eb09
106d08fba45f1e13f85b4b5abc456594878494238933e54b6a06e21ed8a52bc9

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3870
Cache-Control: max-age=132560
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 22:46:28 GMT
Etag: "638f19f6-1d7"
Expires: Thu, 08 Dec 2022 11:35:48 GMT
Last-Modified: Tue, 06 Dec 2022 10:31:18 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a0abf10fb7e96c1c98dacf2f013a68b4
acdd839bce85eadc78a8e821e32e00a958d5c0c8
b85d98f8df05431777d96c767ce4c152302ec3f653cdf6e61c8c3fa9574f3255

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9165
Expires: Wed, 07 Dec 2022 01:19:13 GMT
Date: Tue, 06 Dec 2022 22:46:28 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 06 Dec 2022 22:20:26 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1562
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: YvPRYdCKRnccX/LYE6QBTj1GAQByE11cISEP+mpsF/EGa5JwgFTUwBPzFdHwUSHCFmAufLhtBe8=
x-amz-request-id: TD88KE0SMNM8VTBD
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 06 Dec 2022 21:49:07 GMT
age: 3441
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 22:46:28 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 06 Dec 2022 22:08:58 GMT
cache-control: public,max-age=3600
age: 2250
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
0f7dcaa590e32cfd1c075255188d5f06
d4bb4954fefdb3b59560b54adf500e806e252e39
195795c2511b31519134f5eb4442d8708918ecaff72f8e821a5473ad7c97c448

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3850
Cache-Control: max-age=127472
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 22:46:28 GMT
Etag: "638f062a-1d7"
Expires: Thu, 08 Dec 2022 10:11:00 GMT
Last-Modified: Tue, 06 Dec 2022 09:06:50 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

52.37.79.227

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
52.37.79.227:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: vuPe3PRoxtYog6a+HHk6TA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 47PiFncJYyeIzC8RKXcpMZpth0A=

cheapgiftcerts.com/

156.254.108.60

200 OK

1.3 kB

URL HTTP/1.1
cheapgiftcerts.com/
IP
156.254.108.60:0
ASN
#0

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text
Size
1.3 kB (1322 bytes)
Hash
c4e0db8e627bb572e7a70b1d38d7eab0
9630855306ce9e53d0e58e8104021b3a29eef723
92d0ae5b1886e96954c8bd388afc7ffdf15543ef9691f0a0aa6e49becc8f583c

HTTP Headers

GET / HTTP/1.1
Host: cheapgiftcerts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 22:46:29 GMT
Server: Apache
Upgrade: h2
Connection: Upgrade, close
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1322
Content-Type: text/html; charset=UTF-8

api.share.baidu.com/s.gif?l=http://cheapgiftcerts.com/

182.61.201.93

200 OK

0 B

URL HTTP/1.1
api.share.baidu.com/s.gif?l=http://cheapgiftcerts.com/
IP
182.61.201.93:0
ASN
#38365 Beijing Baidu Netcom Science and Technology Co., Ltd.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /s.gif?l=http://cheapgiftcerts.com/ HTTP/1.1
Host: api.share.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cheapgiftcerts.com/

HTTP/1.1 200 OK
Content-Length: 0
Content-Type: text/plain; charset=utf-8
Date: Tue, 06 Dec 2022 22:46:30 GMT

cheapgiftcerts.com/favicon.ico

156.254.108.60

200 OK

2.0 kB

URL HTTP/1.1
cheapgiftcerts.com/favicon.ico
IP
156.254.108.60:0
ASN
#0

File type
MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel\012- data
Size
2.0 kB (2010 bytes)
Hash
3efddfb3a6b5ff318833df13bdc73783
0fd564c5a3b437a607ce32fc1fa15487829a06b9
d5fccee33605f7bef3ee0acf0484874409aa5460d6ee0490168a5af11e22d38e

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: cheapgiftcerts.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cheapgiftcerts.com/

HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 22:46:30 GMT
Server: Apache
Upgrade: h2
Connection: Upgrade, close
Last-Modified: Fri, 23 Sep 2022 10:46:38 GMT
ETag: "423e-5e955e4763f80-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2010
Content-Type: image/x-icon

ocsp.globalsign.com/gsrsaovsslca2018

104.18.21.226

200 OK

1.4 kB

URL HTTP/1.1
ocsp.globalsign.com/gsrsaovsslca2018
IP
104.18.21.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.4 kB (1432 bytes)
Hash
4d8979b580f9a6c9b4660e41f0bef4c5
97acb985f7e150bc5077979a18d1c443d7df22f0
08a2342e767e94a269b479e389d8415f55e8a1722ed74549e675297516951ae6

HTTP Headers

POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 22:46:30 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Sat, 10 Dec 2022 21:36:42 GMT
ETag: "97acb985f7e150bc5077979a18d1c443d7df22f0"
Last-Modified: Tue, 06 Dec 2022 21:36:43 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 950
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77588ed6fbbffac0-OSL

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4000
Expires: Tue, 06 Dec 2022 23:53:10 GMT
Date: Tue, 06 Dec 2022 22:46:30 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4000
Expires: Tue, 06 Dec 2022 23:53:10 GMT
Date: Tue, 06 Dec 2022 22:46:30 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4000
Expires: Tue, 06 Dec 2022 23:53:10 GMT
Date: Tue, 06 Dec 2022 22:46:30 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4000
Expires: Tue, 06 Dec 2022 23:53:10 GMT
Date: Tue, 06 Dec 2022 22:46:30 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4000
Expires: Tue, 06 Dec 2022 23:53:10 GMT
Date: Tue, 06 Dec 2022 22:46:30 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb602c981-caf1-4cfc-b19b-56f816dc7417.jpeg

34.120.237.76

200 OK

9.9 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb602c981-caf1-4cfc-b19b-56f816dc7417.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.9 kB (9891 bytes)
Hash
c2ae931d0f14a81013f782d43b8c7b85
9ec84996b63362ad370ff67b0fd8136a343c1bbf
9b4a2b3e5e2d2b4fac094135fed10a3040598f1208f6b2ec52d95d10aca66ed5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb602c981-caf1-4cfc-b19b-56f816dc7417.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9891
x-amzn-requestid: f15dc6ba-901b-4ef6-8589-d8918fe84173
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csU8lF3MoAMF47g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6850-496d269b228065a365a67eea;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:53:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3SFFPJye5LvexbHVfPukXIdJ-BSkP5MCpesIJhqxtSNKamcRNr1lFA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 18:21:44 GMT
age: 15886
etag: "9ec84996b63362ad370ff67b0fd8136a343c1bbf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.4 kB (8351 bytes)
Hash
98d2cf29c710d25bd2f03ff216fdd369
b8eb2e11f9655f19334befc036f21489a6473827
614c9b4a7ace908c1ef807964709cb292b33b48ce1d81ccbd2959c2c0ee156ac

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8351
x-amzn-requestid: 607d07ab-6833-4001-82ed-699ea91f84c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlitFk9oAMFakQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb611-3e5f14f833b332647ef7358d;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 0w5Usq-LJMNHxw9UrwUqSslSVROXVHTmY_UhSHNaGh4k4xqh-FSa0A==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:55:40 GMT
etag: "b8eb2e11f9655f19334befc036f21489a6473827"
content-type: image/jpeg
age: 3050
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8e8fa64-7cd3-460d-9040-af3ca0e2a5f5.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10567 bytes)
Hash
b6f4dd03deb6114fec01808b034a711c
c74d29bba44dbb09158da4b9e1b490112c7db915
ddc6721d8a42821c458cf6d5c64ebd10ca0002c95a275be1732cd9ade7bf1b6d

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc8e8fa64-7cd3-460d-9040-af3ca0e2a5f5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10567
x-amzn-requestid: b9b16cdf-bfa2-4e3c-b00f-1704dd3473d1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cgIC6EgLoAMF3hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638986df-3945eea57676d3f91f8f2b3c;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 05:02:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: u9h1d9n-qSPVu7VuzNsUYljKkP7Q1gT6tHrF7DVJIxwyvFcbD2Dg1g==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 03:29:29 GMT
age: 69421
etag: "c74d29bba44dbb09158da4b9e1b490112c7db915"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3a455f5-9c19-4e6f-ab7a-1fe9c399118f.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.6 kB (8579 bytes)
Hash
a0f0782df385287698881f1c19e79b96
5a25f245b594f6cbf2fdaeed2463ac5fbc08068a
4f795cd2286e194cd96751e6a4e3bd0da09c6db5344182e51986b65149e75cd7

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe3a455f5-9c19-4e6f-ab7a-1fe9c399118f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8579
x-amzn-requestid: 0efa303a-364e-488d-beac-24836c7c1e4f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlirE2KoAMFX9g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb610-5564a0c0264ed36f0497e17e;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: xpzGji_JAWkUjhXLouXWlin6rV-44shz6Z_STqo7uK7ZUV2PWs7Zpg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:54:15 GMT
age: 3135
etag: "5a25f245b594f6cbf2fdaeed2463ac5fbc08068a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.6 kB (6557 bytes)
Hash
210b27f5f6310d8fad640acce3d9ae0e
08d241e56622cb900754d95bc5d58ed8826d9f32
64410e13759cdfa24976dcba0c64aca27edc3ee56358f344e55f60793422e3ea

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffe93cbd-4506-4ab1-b0ea-94eabecae7b9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6557
x-amzn-requestid: 0232ddcd-8274-431e-a55e-8298fbfd6dfc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cmcuMG6bIAMFUng=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c0e5a-3cc17121425f87321ce7ae7e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 03:04:58 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JZBA188WoJDCpA8JrEly22avBEZN_Kk8yjRmOhwvDCEiVm2g0Phwvg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 06:07:35 GMT
age: 59935
etag: "08d241e56622cb900754d95bc5d58ed8826d9f32"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5025a35-c128-4d8f-a429-7148aaebb3b1.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.8 kB (9781 bytes)
Hash
f38ce0fb35ef0fc66b61cafd2b09eeb6
aded2fe97a129dc820ba9d6d7605aeadfe17c15c
39bcb5e0c3a9cd39c0fcefbffd9e6f949bb9d85f0bee2b0b7c5cb999b508b1c1

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd5025a35-c128-4d8f-a429-7148aaebb3b1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9781
x-amzn-requestid: 24355473-a83a-42b6-bdf3-ae2c39f7f3eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ccq48GfKoAMFjmA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63882505-2f58dd012665cb131ceff8f2;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 03:52:37 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: N6GEu_CKPRnnSK5YiXyc2wNMYIfd1jOZuylB26w8FmVavlWruMSZhw==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 05:59:19 GMT
age: 60431
etag: "aded2fe97a129dc820ba9d6d7605aeadfe17c15c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

hm.baidu.com/hm.js?cb4fa3f500841e7151657fdaf714cb48

103.235.46.191

200 OK

11 kB

URL HTTP/1.1
hm.baidu.com/hm.js?cb4fa3f500841e7151657fdaf714cb48
IP
103.235.46.191:0
ASN
#55967 Beijing Baidu Netcom Science and Technology Co., Ltd.

File type
ASCII text, with very long lines (619)
Size
11 kB (11257 bytes)
Hash
9d289518aa006fd203b5fc57c5e252d6
c6a4410d4063611c5890ffe8a3b11aff8546fc8b
7f457de57b68cbd2c7f3d60e206cab7956ab872851f07fc28ef25b46989113f7

HTTP Headers

GET /hm.js?cb4fa3f500841e7151657fdaf714cb48 HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cheapgiftcerts.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Length: 11257
Content-Type: application/javascript
Date: Tue, 06 Dec 2022 22:46:30 GMT
Etag: bc72921dcbe87324997b0b3b9961465c
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Server: apache
Set-Cookie: HMACCOUNT=CB1E375E158667B5; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800

hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=223032798&si=cb4fa3f500841e7151657fdaf714cb48&v=1.3.0&lv=1&sn=10711&r=0&ww=1280&u=http%3A%2F%2Fcheapgiftcerts.com%2F&tt=%E5%AE%89%E5%85%A8%E6%B3%A8%E5%86%8C

103.235.46.191

200 OK

43 B

URL HTTP/1.1
hm.baidu.com/hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=223032798&si=cb4fa3f500841e7151657fdaf714cb48&v=1.3.0&lv=1&sn=10711&r=0&ww=1280&u=http%3A%2F%2Fcheapgiftcerts.com%2F&tt=%E5%AE%89%E5%85%A8%E6%B3%A8%E5%86%8C
IP
103.235.46.191:0
ASN
#55967 Beijing Baidu Netcom Science and Technology Co., Ltd.

File type
GIF image data, version 89a, 1 x 1\012- data
Size
43 B (43 bytes)
Hash
ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda

HTTP Headers

GET /hm.gif?cc=1&ck=1&cl=24-bit&ds=1280x1024&vl=939&et=0&ja=0&ln=en-us&lo=0&rnd=223032798&si=cb4fa3f500841e7151657fdaf714cb48&v=1.3.0&lv=1&sn=10711&r=0&ww=1280&u=http%3A%2F%2Fcheapgiftcerts.com%2F&tt=%E5%AE%89%E5%85%A8%E6%B3%A8%E5%86%8C HTTP/1.1
Host: hm.baidu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://cheapgiftcerts.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Content-Length: 43
Content-Type: image/gif
Date: Tue, 06 Dec 2022 22:46:31 GMT
P3p: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Pragma: no-cache
Server: apache
Set-Cookie: HMACCOUNT=019F0B50898D950E; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
Strict-Transport-Security: max-age=172800
X-Content-Type-Options: nosniff

www.telegraum.xyz/

154.82.100.171

301 Moved Permanently

165 B

URL HTTP/1.1
www.telegraum.xyz/
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
165 B (165 bytes)
Hash
6fae2870cbe18ab0e0da2aaa219757f2
659ab8e69a6e6efc066aca568708b9cd26a6fc96
030678976ab4f08f26880602d1606a71135fb47c49a04e6722d47dd81957cb87

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cheapgiftcerts.com/
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Server: NgxFence
Date: Tue, 06 Dec 2022 22:46:32 GMT
Content-Type: text/html
Content-Length: 165
Connection: close
Location: https://www.telegraum.xyz/

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
52b759ea0547eb68c8c4db974587690f
f304b81e2cc4f6b4ad56e26b838a1fc9bd7c2b42
331c1628770fb8a69924e9dc3f85c9b1236d98974c3b7f86b54be47976e99820

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "331C1628770FB8A69924E9DC3F85C9B1236D98974C3B7F86B54BE47976E99820"
Last-Modified: Mon, 05 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 07 Dec 2022 04:46:33 GMT
Date: Tue, 06 Dec 2022 22:46:33 GMT
Connection: keep-alive

www.telegraum.xyz/

154.82.100.171

200 OK

617 B

URL HTTP/2
www.telegraum.xyz/
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Size
617 B (617 bytes)
Hash
c24f25e6b394d4e6caa66ab12c01ec13
08483c8ad505e3d1b17b9e151f2ed03357e28e07
f6df3ba803966b9ece3db8dadfccef016cbc8c13a30d846e8d787cd563f2f184

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://cheapgiftcerts.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: frame
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:33 GMT
content-type: text/html
content-length: 617
content-encoding: gzip
last-modified: Wed, 07 Sep 2022 04:35:53 GMT
etag: "59bb455073c2d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
x-cache: DYNAMIC
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

www.telegraum.xyz/js/config.js?v=20220830

154.82.100.171

200 OK

518 B

URL HTTP/2
www.telegraum.xyz/js/config.js?v=20220830
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type
ASCII text
Size
518 B (518 bytes)
Hash
c6a0029577a84be970fe96287edb37d0
4e37475bae74ccfe0a9a90561c24bcea61a0239f
0ec3190aeca7f1084af9c39066a7c04296c9d083b38508ad078f5f81b38a417f

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /js/config.js?v=20220830 HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:33 GMT
content-type: application/javascript
content-length: 518
content-encoding: gzip
last-modified: Thu, 03 Nov 2022 02:37:23 GMT
etag: "9c22e1332defd81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

www.telegraum.xyz/TG_EN/index.html?20220830

154.82.100.171

200 OK

7.3 kB

URL HTTP/2
www.telegraum.xyz/TG_EN/index.html?20220830
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3602)
Size
7.3 kB (7266 bytes)
Hash
ff49b1dc76d5a2a9bcbfdda6639ffd47
9e0dfd69f3b4dd784a235f3f392a357c1c0bdb76
66f05712d730b49ea3eb7f15c78a175148f6228c29aa57244a2d8698cd1aebb5

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /TG_EN/index.html?20220830 HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: frame
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:33 GMT
content-type: text/html
content-length: 7266
content-encoding: gzip
last-modified: Thu, 22 Sep 2022 10:29:44 GMT
etag: "bb31923b6eced81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
x-cache: DYNAMIC
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

www.telegraum.xyz/TG_EN/Telegram%20Messenger_files/bootstrap.min.css

154.82.100.171

200 OK

11 kB

URL HTTP/2
www.telegraum.xyz/TG_EN/Telegram%20Messenger_files/bootstrap.min.css
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type
ASCII text, with very long lines (42164)
Size
11 kB (10876 bytes)
Hash
e4f830f756449c1797424903b4adfcd9
c82f196f99cf42eead74d6a249a3c6c9ac42a9a3
5d71cac71060572066a19a092a15e4c6e301f35c15dc1436c896c59545161c03

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /TG_EN/Telegram%20Messenger_files/bootstrap.min.css HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/index.html?20220830
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: text/css
content-length: 10876
content-encoding: gzip
last-modified: Sun, 04 Sep 2022 09:26:52 GMT
etag: "e22fd37740c0d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

www.telegraum.xyz/TG_EN/Telegram%20Messenger_files/telegram.css

154.82.100.171

200 OK

32 kB

URL HTTP/2
www.telegraum.xyz/TG_EN/Telegram%20Messenger_files/telegram.css
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type
ASCII text, with very long lines (1862)
Size
32 kB (32418 bytes)
Hash
da188006b1900007703807a82aa4497e
d0dfc3aafae5abf9596ece0fab2364dac52ebd5b
37c21ccbee33735d6bf1053daf6096dcb1479493ab78bd900e3ae57ab6462d93

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /TG_EN/Telegram%20Messenger_files/telegram.css HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/index.html?20220830
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: text/css
content-length: 32418
content-encoding: gzip
last-modified: Wed, 07 Sep 2022 10:36:59 GMT
etag: "9d4e40c2a5c2d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

www.telegraum.xyz/TG_EN/Telegram%20Messenger_files/main.js

154.82.100.171

200 OK

7.2 kB

URL HTTP/2
www.telegraum.xyz/TG_EN/Telegram%20Messenger_files/main.js
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type
ASCII text
Size
7.2 kB (7229 bytes)
Hash
e32e322c62af6da13b78c8fcfca2bd71
38e1e143102dacf5c9d221e98c8da9b068d155d5
8f35095d23e2bfa7f7f0ef5b99253dd55a0ebfad3f2e734f5b4934db22076047

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /TG_EN/Telegram%20Messenger_files/main.js HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/index.html?20220830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: application/javascript
content-length: 7229
content-encoding: gzip
last-modified: Sun, 04 Sep 2022 09:26:52 GMT
etag: "b7f7d17740c0d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

www.telegraum.xyz/js/download.js

154.82.100.171

200 OK

3.6 kB

URL HTTP/2
www.telegraum.xyz/js/download.js
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type
Unicode text, UTF-8 text
Size
3.6 kB (3574 bytes)
Hash
af07171b4cfd80d51ec047099689411e
bcbd443cc07fc2edfb36fedef710bc41707778a3
e707a3e035296751bd8dd86426fee3aac8be8e1c32209987e7e7ebd35c2947da

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /js/download.js HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/index.html?20220830
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: application/javascript
content-length: 3574
content-encoding: gzip
last-modified: Fri, 25 Nov 2022 10:42:24 GMT
etag: "0e87d9aba0d91:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

www.telegraum.xyz/TG_EN/img/twitter.png

154.82.100.171

200 OK

1.3 kB

URL HTTP/2
www.telegraum.xyz/TG_EN/img/twitter.png
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type
PNG image data, 21 x 17, 8-bit/color RGBA, non-interlaced\012- data
Size
1.3 kB (1272 bytes)
Hash
1ed9bf7633f4f449c8d2df94ea0eb35f
2902ba9c2b127c74c2550298a0578d7d8da941c2
e7d23b06a4ffd600558e5443d1e32daaaf13a27cf7bb8b7cc163a92b4054aaf2

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /TG_EN/img/twitter.png HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/Telegram%20Messenger_files/telegram.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: image/png
content-length: 1272
last-modified: Sun, 04 Sep 2022 09:26:53 GMT
etag: "be91157840c0d81:0"
x-powered-by: ASP.NET
x-cache: SCARCE
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

www.telegraum.xyz/TG_EN/img/SiteiOS.jpg?2

154.82.100.171

200 OK

31 kB

URL HTTP/2
www.telegraum.xyz/TG_EN/img/SiteiOS.jpg?2
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 442x270, components 3\012- data
Size
31 kB (31305 bytes)
Hash
89486a05599a1cfd549f8fb2d70e7d73
24867697525df19b88e79d75ff32384eba57b321
5a2c666b6e4f30ff921353cd9a3eccc09b9314c5c5ab11e1a3928936e497b2dc

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /TG_EN/img/SiteiOS.jpg?2 HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/Telegram%20Messenger_files/telegram.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: image/jpeg
content-length: 31305
last-modified: Sun, 04 Sep 2022 09:26:53 GMT
etag: "d2f7840c0d81:0"
x-powered-by: ASP.NET
x-cache: SCARCE
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

www.telegraum.xyz/TG_EN/img/SiteAndroid.jpg?2

154.82.100.171

200 OK

21 kB

URL HTTP/2
www.telegraum.xyz/TG_EN/img/SiteAndroid.jpg?2
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 290x270, components 3\012- data
Size
21 kB (21090 bytes)
Hash
f5eb8dcf9b18f19053034101e920574e
9513c6c5e39669ad27132d470008955dbaae61f0
15a94720d72ed1727fb281ed4af914e17cd8166bb18f5a8484f32f9faff4f365

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /TG_EN/img/SiteAndroid.jpg?2 HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/Telegram%20Messenger_files/telegram.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: image/jpeg
content-length: 21090
last-modified: Sun, 04 Sep 2022 09:26:53 GMT
etag: "c91c7840c0d81:0"
x-powered-by: ASP.NET
x-cache: SCARCE
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

www.telegraum.xyz/TG_EN/img/SiteDesktop.jpg?2

154.82.100.171

200 OK

98 kB

URL HTTP/2
www.telegraum.xyz/TG_EN/img/SiteDesktop.jpg?2
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1246x260, components 3\012- data
Size
98 kB (97628 bytes)
Hash
fa44f18971e0750249cbcf34f66ae11a
0b4017cad011b2ef346094e1c37abb912fa9b7d7
9d47030d555e1765171c05b57ed755744d6051364674efbd99a98df9ec7fa9cd

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /TG_EN/img/SiteDesktop.jpg?2 HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/Telegram%20Messenger_files/telegram.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: image/jpeg
content-length: 97628
last-modified: Sun, 04 Sep 2022 09:26:53 GMT
etag: "9352d7840c0d81:0"
x-powered-by: ASP.NET
x-cache: SCARCE
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

www.telegraum.xyz/TG_EN/Telegram%20Messenger_files/a7532c511d9bab9ea9

154.82.100.171

200 OK

52 kB

URL HTTP/2
www.telegraum.xyz/TG_EN/Telegram%20Messenger_files/a7532c511d9bab9ea9
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 600x360, components 3\012- data
Size
52 kB (51528 bytes)
Hash
d7d1e4e24d395298f9bd94c5a2517294
c42d9dda4e2f9514405904dfee2d450f3a369dd5
d02ef6d030a14b704342a91f82523ba9206b5657c1f4b0bb1830592b0d41a0f1

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /TG_EN/Telegram%20Messenger_files/a7532c511d9bab9ea9 HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/index.html?20220830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: text/plain
content-length: 51528
content-encoding: gzip
last-modified: Sun, 04 Sep 2022 09:26:52 GMT
etag: "016567740c0d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
x-cache: DYNAMIC
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

www.telegraum.xyz/TG_EN/Telegram%20Messenger_files/9fdf3a084a04b47ec8

154.82.100.171

200 OK

299 kB

URL HTTP/2
www.telegraum.xyz/TG_EN/Telegram%20Messenger_files/9fdf3a084a04b47ec8
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.1 (Macintosh), datetime=2022:04:12 14:43:23], progressive, precision 8, 600x368, components 3\012- data
Size
299 kB (298859 bytes)
Hash
190b52805e0d71cbdc6937f163598269
cee5f75467b1771551c2c6a3419b91363f43efc4
feae4d406b80b1e41799a1ae8c8d19f3374cb8255e44a8bfbf7743ecc18be800

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /TG_EN/Telegram%20Messenger_files/9fdf3a084a04b47ec8 HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/index.html?20220830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: text/plain
content-length: 298859
content-encoding: gzip
last-modified: Sun, 04 Sep 2022 09:26:52 GMT
etag: "016567740c0d81:0"
vary: Accept-Encoding
x-powered-by: ASP.NET
x-cache: DYNAMIC
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

www.telegraum.xyz/file/sticker8.gif

154.82.100.171

200 OK

1.4 MB

URL HTTP/2
www.telegraum.xyz/file/sticker8.gif
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type
GIF image data, version 89a, 498 x 498\012- data
Size
1.4 MB (1448066 bytes)
Hash
29def2321a6f7ad3a6077e29a35f512e
6188beaff24e5082a89e338185f2ceb3b8781658
cbf92873c514d288e3a34b430ce83152ee8129a12099e0dc6d129b760fd664a1

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /file/sticker8.gif HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/index.html?20220830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: image/gif
content-length: 1448066
last-modified: Sun, 04 Sep 2022 09:33:59 GMT
etag: "d222c7641c0d81:0"
x-powered-by: ASP.NET
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

www.telegraum.xyz/file/sticker6.gif

154.82.100.171

200 OK

1.6 MB

URL HTTP/2
www.telegraum.xyz/file/sticker6.gif
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type
GIF image data, version 89a, 498 x 498\012- data
Size
1.6 MB (1633679 bytes)
Hash
90d78203f6dbe758cb285c747db2d2aa
30a07e93e27903e0e2e1221c8d384c9dff28f200
9350cb69c19115dd78c16a9fd9cb0ed17a8d63a53035c6eb56dd558b51f1583e

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /file/sticker6.gif HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/index.html?20220830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: image/gif
content-length: 1633679
last-modified: Sun, 04 Sep 2022 09:33:59 GMT
etag: "9afd297641c0d81:0"
x-powered-by: ASP.NET
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

www.telegraum.xyz/file/sticker9.gif

154.82.100.171

200 OK

1.6 MB

URL HTTP/2
www.telegraum.xyz/file/sticker9.gif
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type
GIF image data, version 89a, 498 x 498\012- data
Size
1.6 MB (1608613 bytes)
Hash
e076bf84e92638004edc6d39a304af7a
7f41cea8f79dfdd13fb9155b8f21ad18528523d9
ca404a2da704da10fdb161e14eefc4d72cdc332eadc08254c2108ede11329275

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /file/sticker9.gif HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/index.html?20220830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: image/gif
content-length: 1608613
last-modified: Sun, 04 Sep 2022 09:33:59 GMT
etag: "ce312d7641c0d81:0"
x-powered-by: ASP.NET
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

www.telegraum.xyz/TG_EN/img/t_logo_sprite.svg

154.82.100.171

200 OK

0 B

URL HTTP/2
www.telegraum.xyz/TG_EN/img/t_logo_sprite.svg
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /TG_EN/img/t_logo_sprite.svg HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/index.html?20220830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: image/svg+xml
last-modified: Sun, 04 Sep 2022 09:26:53 GMT
etag: W/"3b9ef7840c0d81:0"
x-powered-by: ASP.NET
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

www.telegraum.xyz/TG_EN/img/SiteIconAndroid.svg

154.82.100.171

200 OK

0 B

URL HTTP/2
www.telegraum.xyz/TG_EN/img/SiteIconAndroid.svg
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /TG_EN/img/SiteIconAndroid.svg HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/Telegram%20Messenger_files/telegram.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: image/svg+xml
last-modified: Sun, 04 Sep 2022 09:26:53 GMT
etag: W/"a217e7840c0d81:0"
x-powered-by: ASP.NET
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

www.telegraum.xyz/file/sticker2.gif

154.82.100.171

200 OK

0 B

URL HTTP/2
www.telegraum.xyz/file/sticker2.gif
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /file/sticker2.gif HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/index.html?20220830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: image/gif
content-length: 2634088
last-modified: Sun, 04 Sep 2022 09:33:59 GMT
etag: "99a6247641c0d81:0"
x-powered-by: ASP.NET
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

www.telegraum.xyz/file/sticker3.gif

154.82.100.171

200 OK

0 B

URL HTTP/2
www.telegraum.xyz/file/sticker3.gif
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /file/sticker3.gif HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/index.html?20220830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: image/gif
content-length: 2712732
last-modified: Sun, 04 Sep 2022 09:33:59 GMT
etag: "4454267641c0d81:0"
x-powered-by: ASP.NET
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

www.telegraum.xyz/TG_EN/img/t_main_iOS_demo.mp4

154.82.100.171

206 Partial Content

0 B

URL HTTP/2
www.telegraum.xyz/TG_EN/img/t_main_iOS_demo.mp4
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /TG_EN/img/t_main_iOS_demo.mp4 HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/index.html?20220830
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 206 Partial Content
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: video/mp4
content-length: 244748
last-modified: Sun, 04 Sep 2022 09:26:53 GMT
etag: "a788107840c0d81:0"
x-powered-by: ASP.NET
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-range: bytes 0-244747/244748
X-Firefox-Spdy: h2

www.telegraum.xyz/file/sticker5.gif

154.82.100.171

200 OK

0 B

URL HTTP/2
www.telegraum.xyz/file/sticker5.gif
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /file/sticker5.gif HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/index.html?20220830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: image/gif
content-length: 2230056
last-modified: Sun, 04 Sep 2022 09:33:59 GMT
etag: "bced287641c0d81:0"
x-powered-by: ASP.NET
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

www.telegraum.xyz/TG_EN/img/SiteIconApple.svg

154.82.100.171

200 OK

0 B

URL HTTP/2
www.telegraum.xyz/TG_EN/img/SiteIconApple.svg
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /TG_EN/img/SiteIconApple.svg HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/Telegram%20Messenger_files/telegram.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: image/svg+xml
last-modified: Sun, 04 Sep 2022 09:26:53 GMT
etag: W/"103ee7840c0d81:0"
x-powered-by: ASP.NET
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-encoding: br
X-Firefox-Spdy: h2

www.telegraum.xyz/TG_EN/file/sticker.gif

154.82.100.171

200 OK

0 B

URL HTTP/2
www.telegraum.xyz/TG_EN/file/sticker.gif
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /TG_EN/file/sticker.gif HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/index.html?20220830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: image/gif
content-length: 2651541
last-modified: Sun, 04 Sep 2022 09:26:59 GMT
etag: "77429e7b40c0d81:0"
x-powered-by: ASP.NET
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

www.telegraum.xyz/TG_EN/img/t_main_Android_demo.mp4

154.82.100.171

206 Partial Content

0 B

URL HTTP/2
www.telegraum.xyz/TG_EN/img/t_main_Android_demo.mp4
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /TG_EN/img/t_main_Android_demo.mp4 HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/index.html?20220830
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 206 Partial Content
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: video/mp4
content-length: 250838
last-modified: Sun, 04 Sep 2022 09:26:53 GMT
etag: "b111107840c0d81:0"
x-powered-by: ASP.NET
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
content-range: bytes 0-250837/250838
X-Firefox-Spdy: h2

www.telegraum.xyz/file/sticker7.gif

154.82.100.171

200 OK

0 B

URL HTTP/2
www.telegraum.xyz/file/sticker7.gif
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /file/sticker7.gif HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/index.html?20220830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: image/gif
content-length: 2291648
last-modified: Sun, 04 Sep 2022 09:33:59 GMT
etag: "9a372b7641c0d81:0"
x-powered-by: ASP.NET
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

www.telegraum.xyz/file/sticker4.gif

154.82.100.171

200 OK

0 B

URL HTTP/2
www.telegraum.xyz/file/sticker4.gif
IP
154.82.100.171:0
ASN
#399077 TERAEXCH

File type

Size
0 B (0 bytes)
Hash

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /file/sticker4.gif HTTP/1.1
Host: www.telegraum.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.telegraum.xyz/TG_EN/index.html?20220830
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
server: NgxFence
date: Tue, 06 Dec 2022 22:46:34 GMT
content-type: image/gif
content-length: 2129042
last-modified: Sun, 04 Sep 2022 09:33:59 GMT
etag: "b8e277641c0d81:0"
x-powered-by: ASP.NET
x-cache: HIT
strict-transport-security: max-age=31536000; includeSubdomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations