| groupvipfullmelayuviral.gvmay1.com/my/ |  188.114.97.1 | 200 OK | 3.8 kB |
URL User Request GET HTTP/1.1groupvipfullmelayuviral.gvmay1.com/my/ IP188.114.97.1:80
File typeHTML document, Unicode text, UTF-8 text, with very long lines (2406) Hash42612aa2c871f4861ab0ef24d0696dff 300a1da287b8693ac85e87a799eb64b50820db4d 25e1290232894ea6e99a36fdf664f6d36b1050204791aa4435b25540a82dc65f
GET /my/ HTTP/1.1
Host: groupvipfullmelayuviral.gvmay1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 29 Mar 2024 04:39:02 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Sun, 17 Mar 2024 12:05:43 GMT
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VGVUZekCUTuR4vIRwpp3n%2Bglq2jgxlWcX6eAKjRD6LLebcru0jAYJeaq6wPRqRLXPBN1eR3HpKAthsp3qNfM4XF1Sn5Y2ZWzFYnpZ6wGJ%2BwYjXqp2mfkGwDmhwyqmT0BDCubNSW74oINW30r5mO5LS6Qa4NS"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 86bd2c7c3e4b5689-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
|
|
| telegram.org/css/font-roboto.css?1 |  149.154.167.99 | 200 OK | 666 B |
URL GET HTTP/1.1telegram.org/css/font-roboto.css?1 IP149.154.167.99:80 ASN#62041 Telegram Messenger Inc
Requested byhttp://groupvipfullmelayuviral.gvmay1.com/my/
Hashc706681409217a14a24c7e2deb8cf423 08b443fe5bc6a223a9de08fb56282365b1d13857 84b97b3fa8847b64c6d3833561e4b3146530577171e85ad226578a087db70974
GET /css/font-roboto.css?1 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://groupvipfullmelayuviral.gvmay1.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 29 Mar 2024 04:39:02 GMT
Content-Type: text/css
Last-Modified: Thu, 20 Oct 2022 11:05:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"63512b7d-1816"
Expires: Tue, 02 Apr 2024 04:39:02 GMT
Cache-Control: max-age=345600
Content-Encoding: gzip
|
|
| telegram.org/css/bootstrap.min.css?3 | 149.154.167.99 | 200 OK | 10 kB |
URL GET HTTP/1.1telegram.org/css/bootstrap.min.css?3 IP149.154.167.99:80 ASN#62041 Telegram Messenger Inc
Requested byhttp://groupvipfullmelayuviral.gvmay1.com/my/
File typeASCII text, with very long lines (42164) Hashc2656e265ef58a9cc9f4b70b15da5fb9 85c5ebdb89d4574d72688c2650d4b84b9b09770a f1d083ffaa644c708f11db29707aa57c19246e6d32643b03fee3f82c17b224b3
GET /css/bootstrap.min.css?3 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://groupvipfullmelayuviral.gvmay1.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 29 Mar 2024 04:39:02 GMT
Content-Type: text/css
Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"5a05e7c6-a61b"
Expires: Tue, 02 Apr 2024 04:39:02 GMT
Cache-Control: max-age=345600
Content-Encoding: gzip
|
|
| telegram.org/js/tgwallpaper.min.js?3 | 149.154.167.99 | 200 OK | 1.5 kB |
URL GET HTTP/1.1telegram.org/js/tgwallpaper.min.js?3 IP149.154.167.99:80 ASN#62041 Telegram Messenger Inc
Requested byhttp://groupvipfullmelayuviral.gvmay1.com/my/
File typeASCII text, with very long lines (2979), with no line terminators Hash2b89d34702716a8ad2cc3977718f53a3 04406ebd6a9e2ce79dbac5e5048cfe1384e4574a 2031e418ee10af8110729b3f327b968462fc0a9d8d1da095387bb472ccd0dee6
GET /js/tgwallpaper.min.js?3 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://groupvipfullmelayuviral.gvmay1.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 29 Mar 2024 04:39:02 GMT
Content-Type: application/javascript
Last-Modified: Thu, 03 Mar 2022 19:57:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"62211da5-ba3"
Expires: Tue, 02 Apr 2024 04:39:02 GMT
Cache-Control: max-age=345600
Content-Encoding: gzip
|
|
| telegram.org/css/telegram.css?236 | 149.154.167.99 | 200 OK | 29 kB |
URL GET HTTP/1.1telegram.org/css/telegram.css?236 IP149.154.167.99:80 ASN#62041 Telegram Messenger Inc
Requested byhttp://groupvipfullmelayuviral.gvmay1.com/my/
File typeASCII text, with very long lines (1267) Hash0d209d756face073dd14a437f07e58b2 20cb9119fdd02921a6bd0b1500f78a0b76a7a5c0 acd326a9263ee8c4cbc757fed46333732a0e3f8f48d398cbd4f8e36a09fdaf76
GET /css/telegram.css?236 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://groupvipfullmelayuviral.gvmay1.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 29 Mar 2024 04:39:02 GMT
Content-Type: text/css
Last-Modified: Mon, 20 Mar 2023 10:58:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"64183c6f-1c0b3"
Expires: Tue, 02 Apr 2024 04:39:02 GMT
Cache-Control: max-age=345600
Content-Encoding: gzip
|
|
| telegram.org/img/tgme/pattern.svg?1 | 149.154.167.99 | 200 OK | 82 kB |
URL GET HTTP/1.1telegram.org/img/tgme/pattern.svg?1 IP149.154.167.99:80 ASN#62041 Telegram Messenger Inc
Requested byhttp://groupvipfullmelayuviral.gvmay1.com/my/
File typeSVG Scalable Vector Graphics image Hashd0c22c6a97023d85ba6e644a41c44a5d 4284efb616c182da4450c123174ce0e81a322845 118add53487c02aaf5b5ab9f69380fa06717deb10492e14aaa487e3c62806ad4
GET /img/tgme/pattern.svg?1 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://telegram.org/css/telegram.css?236
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 29 Mar 2024 04:39:02 GMT
Content-Type: image/svg+xml
Last-Modified: Thu, 05 Jan 2023 17:52:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"63b70e44-3891a"
Expires: Tue, 02 Apr 2024 04:39:02 GMT
Cache-Control: max-age=345600
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|
| i.ibb.co/XpRdgZ1/38a3498e-c543-42bc-9b0c-5efc4f520e62.jpg |  162.19.58.160 | 200 OK | 112 kB |
URL GET HTTP/2i.ibb.co/XpRdgZ1/38a3498e-c543-42bc-9b0c-5efc4f520e62.jpg IP162.19.58.160:443
Requested byhttp://groupvipfullmelayuviral.gvmay1.com/my/ CertificateIssuerLet's Encrypt Subjectibb.co Fingerprint47:33:B4:39:55:FC:BC:18:08:79:9C:6C:9D:F3:CF:3A:89:C4:99:62 ValidityWed, 07 Feb 2024 12:41:56 GMT - Tue, 07 May 2024 12:41:55 GMT
File typeJPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 640x788, components 3 Size112 kB (111589 bytes) Hash09bb25e250219a5bda7443d6d103eff6 2f80fcad1c719c42263976d5a8c8d1da02077151 1224dc6f711be82cc3c520a314225e3fc57c80dd2e13f248c1f0155ccf3fae53
GET /XpRdgZ1/38a3498e-c543-42bc-9b0c-5efc4f520e62.jpg HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://groupvipfullmelayuviral.gvmay1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 29 Mar 2024 04:39:02 GMT
content-type: image/jpeg
content-length: 111589
last-modified: Sat, 16 Mar 2024 07:09:43 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 | 149.154.167.99 | 200 OK | 11 kB |
URL GET HTTP/1.1telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 IP149.154.167.99:80 ASN#62041 Telegram Messenger Inc
Requested byhttp://groupvipfullmelayuviral.gvmay1.com/my/
File typeWeb Open Font Format (Version 2), TrueType, length 11028, version 1.0 Hash1f6d3cf6d38f25d83d95f5a800b8cac3 279f300ca2cbbdf9f5036ef2f438607fbf377daa 796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f
GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://groupvipfullmelayuviral.gvmay1.com
DNT: 1
Connection: keep-alive
Referer: http://telegram.org/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 29 Mar 2024 04:39:02 GMT
Content-Type: application/octet-stream
Content-Length: 11028
Last-Modified: Thu, 20 Oct 2022 11:05:33 GMT
Connection: keep-alive
ETag: "63512b7d-2b14"
Expires: Tue, 02 Apr 2024 04:39:02 GMT
Cache-Control: max-age=345600
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 | 149.154.167.99 | 200 OK | 11 kB |
URL GET HTTP/1.1telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 IP149.154.167.99:80 ASN#62041 Telegram Messenger Inc
Requested byhttp://groupvipfullmelayuviral.gvmay1.com/my/
File typeWeb Open Font Format (Version 2), TrueType, length 11040, version 1.0 Hash5e22a46c04d947a36ea0cad07afcc9e1 6091d981c2a4ee975c7f6b56186ee698040bb804 0f53e8b0a717ca4ce313eec62b90d41db62c2f4946259a65c93bf8e84c5b0c44
GET /fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://groupvipfullmelayuviral.gvmay1.com
DNT: 1
Connection: keep-alive
Referer: http://telegram.org/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 29 Mar 2024 04:39:02 GMT
Content-Type: application/octet-stream
Content-Length: 11040
Last-Modified: Thu, 20 Oct 2022 11:05:33 GMT
Connection: keep-alive
ETag: "63512b7d-2b20"
Expires: Tue, 02 Apr 2024 04:39:02 GMT
Cache-Control: max-age=345600
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| telegram.org/img/apple-touch-icon.png | 149.154.167.99 | 200 OK | 5.6 kB |
URL GET HTTP/1.1telegram.org/img/apple-touch-icon.png IP149.154.167.99:80 ASN#62041 Telegram Messenger Inc
Requested byhttp://groupvipfullmelayuviral.gvmay1.com/my/
File typePNG image data, 180 x 180, 8-bit/color RGB, non-interlaced Hash295ccdb03006b8dfef45090dafbd46ac 491ab660270e47cbac6a5731c51cca71c1c1b2b1 a51d667d4262047c23e3a2a8aac3b46dc8a58c686cc013f2354011c07bf22cf3
GET /img/apple-touch-icon.png HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://groupvipfullmelayuviral.gvmay1.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 29 Mar 2024 04:39:02 GMT
Content-Type: image/png
Content-Length: 5644
Last-Modified: Thu, 21 Apr 2022 13:47:47 GMT
Connection: keep-alive
ETag: "62616083-160c"
Expires: Tue, 02 Apr 2024 04:39:02 GMT
Cache-Control: max-age=345600
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
|
|
| telegram.org/img/website_icon.svg?4 | 149.154.167.99 | 200 OK | 1.0 kB |
URL GET HTTP/1.1telegram.org/img/website_icon.svg?4 IP149.154.167.99:80 ASN#62041 Telegram Messenger Inc
Requested byhttp://groupvipfullmelayuviral.gvmay1.com/my/
File typeSVG Scalable Vector Graphics image Hash02f7553e1ac3129cd1c4d0442b5a0f81 0dd8634450681fe1a2d0c1e5b02d6d0954e2772d 0019255c610cb0843c524d7995905fa5201651fcc393846bee8414f0610097f5
GET /img/website_icon.svg?4 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://groupvipfullmelayuviral.gvmay1.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 29 Mar 2024 04:39:02 GMT
Content-Type: image/svg+xml
Last-Modified: Mon, 20 Jul 2020 20:41:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"5f160181-768"
Expires: Tue, 02 Apr 2024 04:39:02 GMT
Cache-Control: max-age=345600
Access-Control-Allow-Origin: *
Content-Encoding: gzip
|
|
| groupvipfullmelayuviral.gvmay1.com/my | 188.114.97.1 | 301 Moved Permanently | 10 kB |
URL User Request GET HTTP/2groupvipfullmelayuviral.gvmay1.com/my IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subjectgvmay1.com Fingerprint8C:95:B4:A5:A4:C2:95:54:28:0C:B8:7E:F3:33:CB:72:26:27:5C:68 ValidityFri, 22 Mar 2024 04:16:48 GMT - Thu, 20 Jun 2024 04:16:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram |
GET /my HTTP/1.1
Host: groupvipfullmelayuviral.gvmay1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 29 Mar 2024 04:39:01 GMT
content-type: text/html; charset=iso-8859-1
location: http://groupvipfullmelayuviral.gvmay1.com/my/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i3I%2FcZVHLYzl7HsfMnIP0aPQ3eQMthXHkzWEnd0TWJVQRXhTrNqQHdTEynzJVnukcdbMGH0g79%2Fj%2BP4xL9npAqKsiRTGY8J1Rkq%2F91%2Bf3jIjeKposRLugYhFiT5CGxYvGMJTsOCmvI55ZmWTs8Ke8BKFMr5q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 86bd2c79a8d55696-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|