WEBSITE ANALYSIS REPORT

http://www.indexxjjo.vercel.app/

22 Oct 2026 · 21:06:24.000 UTCpublic

Report tags: phishing suspicious telegram_bot
Submit tags: openphish

Request review

Phishing detected

10 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

21:05:55.921 GET No response document 0 B 0 ms 4 alerts

21:05:56.296 GET 200 document 13.4 KB 45 ms 6 alerts

Transaction #09

Request / response

URL

GET HTTPS

https://indexxjjo.vercel.app/

IP / ASN

216.198.79.67

AS16509 · AMAZON-02

Requested by: Not recorded

Resource information

File type: HTML document, ASCII text, with very long lines (4646), with CRLF line terminators
MIME type: text/html; charset=utf-8
First seen (UTC): 22 Oct 2026 · 05:42:54.893 UTC
Last seen (UTC): 22 Oct 2026 · 21:06:30.236 UTC
Times seen: 3

Size: 13.4 KB (13690 bytes)
MD5: bb85fb07c33c73a9f3bcb066f8530038
SHA1: c65701db01dd17961ec9ef09be586d4228f37bc5
SHA256: 823cacb4f5199cdbe66d60d761b4857230a8273bdfa34c170154822f721eaa43

Certificate information

Issuer: Google Trust Services · WR1
Subject: *.vercel.app
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC
Valid from: Sat, 29 Aug 2026 19:48:09 GMT
Valid until: Fri, 27 Nov 2026 19:48:08 GMT

Technology fingerprints

HSTS (Security)
cdnjs (CDN)
Vercel (PaaS)
Popper:1.12.9 (Miscellaneous)
Cloudflare (CDN)
jQuery:2.2.4 (JavaScript libraries)
Google Hosted Libraries (CDN)
jQuery CDN (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
urlquery Phishing - Known Phishing Kit detected	high	Phishing
urlquery Suspicious - Suspicious Javascript code	medium	Suspicious
YARAhub by abuse.ch Detects file containing Telegram Bot API	medium	malware
DNS4EU Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET / HTTP/1.1
Host: indexxjjo.vercel.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
access-control-allow-origin: *
age: 209490
cache-control: public, max-age=0, must-revalidate
content-disposition: inline
content-encoding: br
content-type: text/html; charset=utf-8
date: Thu, 22 Oct 2026 21:05:56 GMT
etag: W/"bb85fb07c33c73a9f3bcb066f8530038"
last-modified: Tue, 20 Oct 2026 10:54:25 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::stvjx-1792703156334-7cedbb4a0dc8
X-Firefox-Spdy: h2

21:05:56.753 GET 200 script 83.6 KB 96 ms —

21:05:56.755 GET 200 script 84.7 KB 305 ms —

21:05:56.756 GET 200 script 265.4 KB 61 ms —

21:05:56.758 GET 200 script 18.7 KB 35 ms —

21:05:57.083 GET 200 script 84.7 KB 23 ms —

21:05:57.131 GET 404 img 1.0 KB 168 ms —

21:05:57.262 GET 404 img 79 B 17 ms 3 alerts

http://www.indexxjjo.vercel.app/

Domain graph

Hostnames

Connections