200 OK 4.2 kB URL User Request GET HTTP/2 IP
Certificate IssuerLet's Encrypt
Subjectwww.memeksalto.com
FingerprintF7:D2:16:94:08:59:2A:2B:E9:6E:EA:8B:AD:96:3D:9E:0A:5F:97:03
ValidityThu, 26 Oct 2023 22:18:10 GMT - Wed, 24 Jan 2024 22:18:09 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (3560), with CRLF line terminators
Hash b79c6989470a08dc42a94c7752080933
d92f8f0b8249bfeafc0e66e639894d17933bd3c6
d9c02b3ba873ba252d201ab0c8b496a31ab239cd55a8f390f0555eba9830b5b3
Analyzer Verdict Alert OpenPhish phishing Telegram
GET / HTTP/1.1
Host: www.memeksalto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Thu, 26 Oct 2023 23:29:46 GMT
etag: "2916-608a6f282bcf6-gzip"
accept-ranges: bytes
cache-control: max-age=600
expires: Thu, 02 Nov 2023 00:50:22 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4206
content-type: text/html
date: Thu, 02 Nov 2023 00:40:22 GMT
server: Apache
X-Firefox-Spdy: h2
cdn1.telegram-cdn.org/file/GI3Kb7e89TukZk4H8jRizYUC1hIzsPsTEbWHJAGHzavtCKbHdlxP9Obrf843TB13O7bwVa1sQ5LyMkyvHY8nz5_tK24LG_HU8amvQFOWEVHMTbB-poDfO8qiDQqmxSpekAK5KxCx1mNJVlhklOAyP5BAX3GQ-s3dC4xCtgbnaMcL56oviaBnUiT-STtRr-vyQ749zn0wl4-ALCdxkcZEyjM3kugtS2N5xETnEOeV_dJ5tfQ7CZUrsazzmmYMnApL-aCDYIMG5uodVCNAm5IfrPcd1EzXRB4xqSp6rlOUM1SGe6AiNE09RAjzH26sUGTJh1mOzewB6PJNtw3cuVGhyg.jpg
404 Not Found 161 B URL GET HTTP/2 cdn1.telegram-cdn.org/file/GI3Kb7e89TukZk4H8jRizYUC1hIzsPsTEbWHJAGHzavtCKbHdlxP9Obrf843TB13O7bwVa1sQ5LyMkyvHY8nz5_tK24LG_HU8amvQFOWEVHMTbB-poDfO8qiDQqmxSpekAK5KxCx1mNJVlhklOAyP5BAX3GQ-s3dC4xCtgbnaMcL56oviaBnUiT-STtRr-vyQ749zn0wl4-ALCdxkcZEyjM3kugtS2N5xETnEOeV_dJ5tfQ7CZUrsazzmmYMnApL-aCDYIMG5uodVCNAm5IfrPcd1EzXRB4xqSp6rlOUM1SGe6AiNE09RAjzH26sUGTJh1mOzewB6PJNtw3cuVGhyg.jpg
IP
Requested by https://www.memeksalto.com/
Certificate IssuerGoogle Trust Services LLC
Subjectcdn1.telegram-cdn.org
Fingerprint4E:22:54:47:BB:3B:F5:48:4E:DD:A8:66:08:79:C1:C5:AF:A0:22:A1
ValidityFri, 06 Oct 2023 12:52:37 GMT - Thu, 04 Jan 2024 13:44:49 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash c926749c7315a9638cdec5ce906eeee9
48256deb850a7c6710cf1b6adfa6108aebf2e529
58dbd27b6da686f762a9a2c4566dcdfcdd585a954366569bc233ffc67a506134
GET /file/GI3Kb7e89TukZk4H8jRizYUC1hIzsPsTEbWHJAGHzavtCKbHdlxP9Obrf843TB13O7bwVa1sQ5LyMkyvHY8nz5_tK24LG_HU8amvQFOWEVHMTbB-poDfO8qiDQqmxSpekAK5KxCx1mNJVlhklOAyP5BAX3GQ-s3dC4xCtgbnaMcL56oviaBnUiT-STtRr-vyQ749zn0wl4-ALCdxkcZEyjM3kugtS2N5xETnEOeV_dJ5tfQ7CZUrsazzmmYMnApL-aCDYIMG5uodVCNAm5IfrPcd1EzXRB4xqSp6rlOUM1SGe6AiNE09RAjzH26sUGTJh1mOzewB6PJNtw3cuVGhyg.jpg HTTP/1.1
Host: cdn1.telegram-cdn.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.memeksalto.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx/1.18.0
date: Thu, 02 Nov 2023 00:40:23 GMT
content-type: text/html; charset=UTF-8
content-length: 161
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
0 B URL GET telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
IP
Requested by https://www.memeksalto.com/
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.memeksalto.com
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
telegram.org/css/font-roboto.css?1
200 OK 6.2 kB URL GET HTTP/2 telegram.org/css/font-roboto.css?1
IP
ASN #62041 Telegram Messenger Inc
Requested by https://www.memeksalto.com/
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type ASCII text, with very long lines (6354), with no line terminators
Hash c06318a1f377e388b69b104b4cefa1a6
151f067aae997487880e573876f96b8d598e64db
1a53363e667fffef8a82588191989d36e680b4d341c6b557e62bf207311a3d70
GET /css/font-roboto.css?1 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.memeksalto.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 02 Nov 2023 00:40:23 GMT
content-type: text/css
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: W/"63512b7d-1816"
expires: Mon, 06 Nov 2023 00:40:23 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/css/bootstrap.min.css?3
200 OK 42 kB URL GET HTTP/2 telegram.org/css/bootstrap.min.css?3
IP
ASN #62041 Telegram Messenger Inc
Requested by https://www.memeksalto.com/
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type ASCII text, with very long lines (42164)
Hash c2656e265ef58a9cc9f4b70b15da5fb9
85c5ebdb89d4574d72688c2650d4b84b9b09770a
f1d083ffaa644c708f11db29707aa57c19246e6d32643b03fee3f82c17b224b3
GET /css/bootstrap.min.css?3 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.memeksalto.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 02 Nov 2023 00:40:23 GMT
content-type: text/css
last-modified: Fri, 10 Nov 2017 17:54:14 GMT
etag: W/"5a05e7c6-a61b"
expires: Mon, 06 Nov 2023 00:40:23 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/css/telegram.css?236
200 OK 115 kB URL GET HTTP/2 telegram.org/css/telegram.css?236
IP
ASN #62041 Telegram Messenger Inc
Requested by https://www.memeksalto.com/
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type ASCII text, with very long lines (1267)
Size 115 kB (114867 bytes)
Hash 0d209d756face073dd14a437f07e58b2
20cb9119fdd02921a6bd0b1500f78a0b76a7a5c0
acd326a9263ee8c4cbc757fed46333732a0e3f8f48d398cbd4f8e36a09fdaf76
GET /css/telegram.css?236 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.memeksalto.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 02 Nov 2023 00:40:23 GMT
content-type: text/css
last-modified: Mon, 20 Mar 2023 10:58:55 GMT
etag: W/"64183c6f-1c0b3"
expires: Mon, 06 Nov 2023 00:40:23 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/js/tgwallpaper.min.js?3
200 OK 3.0 kB URL GET HTTP/2 telegram.org/js/tgwallpaper.min.js?3
IP
ASN #62041 Telegram Messenger Inc
Requested by https://www.memeksalto.com/
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type ASCII text, with very long lines (2998), with no line terminators
Hash f03422dc797fd26a3834b1ec041128ed
a6e88f4fe48b749c2b7360e8e004f64b6cfffb1a
046ec6b7909d0ca5cc6ef271a1b57b2f2be0bd88e3495fd8c496f1524e8ffaac
GET /js/tgwallpaper.min.js?3 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.memeksalto.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 02 Nov 2023 00:40:23 GMT
content-type: application/javascript
last-modified: Thu, 03 Mar 2022 19:57:25 GMT
etag: W/"62211da5-ba3"
expires: Mon, 06 Nov 2023 00:40:23 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/img/tgme/pattern.svg?1
200 OK 232 kB URL GET HTTP/2 telegram.org/img/tgme/pattern.svg?1
IP
ASN #62041 Telegram Messenger Inc
Requested by https://www.memeksalto.com/
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size 232 kB (231706 bytes)
Hash d0c22c6a97023d85ba6e644a41c44a5d
4284efb616c182da4450c123174ce0e81a322845
118add53487c02aaf5b5ab9f69380fa06717deb10492e14aaa487e3c62806ad4
GET /img/tgme/pattern.svg?1 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/css/telegram.css?236
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.18.0
date: Thu, 02 Nov 2023 00:40:23 GMT
content-type: image/svg+xml
last-modified: Thu, 05 Jan 2023 17:52:04 GMT
etag: W/"63b70e44-3891a"
expires: Mon, 06 Nov 2023 00:40:23 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2
0 B URL GET telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2
IP
Requested by https://www.memeksalto.com/
Certificate IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.memeksalto.com
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
107.180.236.64
0.0.0.0
149.154.167.99