Report - en-telegram.com/

Report Overview

Submitted URL
en-telegram.com/
IP
118.107.246.54
ASN
#132825 MYTEK TRADING PTY LTD
Submitted
2024-04-17 17:29:31
Access
public
Website Title
Telegram Messenger
Final URL
en-telegram.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
58

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
en-telegram.com	unknown	2022-07-09	2022-07-09	2024-03-19	13 kB	1.3 MB	118.107.246.54

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram
2024-04-17	medium	en-telegram.com/	Telegram

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	en-telegram.com/js/jquery.min.js	103 kB	2023-03-10	2024-04-30
Pretty URL en-telegram.com/js/jquery.min.js IP 118.107.246.54 ASN #132825 MYTEK TRADING PTY LTD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 02:33:38 Last Seen2024-04-30 07:42:00 Times Seen14 Hash 1cb23b8c8ce524a8ecfc68c5a7886b3a cf8e39cb91f6959a08656aba1bd112dc3bc15361 39052c6056babe0c8770f1562ca1bca7311eb8c5d06a5e0aaba473b1db846688 Loading...

	en-telegram.com/js/jquery.flexslider-min.js	21 kB	2023-03-07	2024-04-30
Pretty URL en-telegram.com/js/jquery.flexslider-min.js IP 118.107.246.54 ASN #132825 MYTEK TRADING PTY LTD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:50:43 Last Seen2024-04-30 07:42:00 Times Seen203 Hash 2b22ba873303e38db52d334001c9c35f 659986c36a7f19a2662ed3c5a000e1de11e36923 0e5d72c20e148edca04967ab4bff432f44264779dc5ecd81bd710eb487fdd145 Loading...

	en-telegram.com/	0 B	2023-03-07	2024-04-30
Pretty URL en-telegram.com/ IP 118.107.246.54 ASN #132825 MYTEK TRADING PTY LTD Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-30 11:33:26 Times Seen37212413 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	en-telegram.com/	0 B	2023-03-07	2024-04-30
Pretty URL en-telegram.com/ IP 118.107.246.54 ASN #132825 MYTEK TRADING PTY LTD Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-30 11:33:26 Times Seen37212413 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	en-telegram.com/js/jquery-1.7.2.min.js	95 kB	2023-03-07	2024-04-30
Pretty URL en-telegram.com/js/jquery-1.7.2.min.js IP 118.107.246.54 ASN #132825 MYTEK TRADING PTY LTD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:23 Last Seen2024-04-30 10:03:01 Times Seen13865 Hash b8d64d0bc142b3f670cc0611b0aebcae abcd2ba13348f178b17141b445bc99f1917d47af 47b68dce8cb6805ad5b3ea4d27af92a241f4e29a5c12a274c852e4346a0500b4 Loading...

	en-telegram.com/js/update.js	3.0 kB	2023-03-07	2024-04-30
Pretty URL en-telegram.com/js/update.js IP 118.107.246.54 ASN #132825 MYTEK TRADING PTY LTD Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:03:21 Last Seen2024-04-30 07:42:00 Times Seen62 Hash 9174ba9a87bc757a661bb069e6a1318a 29143c8d52f006eec53392f68c8a2cc3c484f952 3ea068a5f7fd4dc41f828c0c55e93c03968c1d032cf208fc78d2ee88e67c9c6f Loading...

HTTP Transactions (29)

URL IP Response Size

en-telegram.com/css/lanrenzhijia.css

118.107.246.54

404 Not Found

146 B

URL GET HTTP/2
en-telegram.com/css/lanrenzhijia.css
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /css/lanrenzhijia.css HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2

en-telegram.com/img/fs.png

118.107.246.54

200 OK

5.8 kB

URL GET HTTP/2
en-telegram.com/img/fs.png
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
PNG image data, 129 x 129, 8-bit/color RGBA, non-interlaced
Size
5.8 kB (5785 bytes)
Hash
6f19568ddda871fa9872dd5db7e29ce2
ced71e849d3e416db890fa33e74119a9dc15d671
c8408ee17d4ed1042171a239088ad80eb9637353808a7f37a15c384bae9d63d0

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /img/fs.png HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: image/png
content-length: 5785
last-modified: Fri, 08 Jul 2022 09:48:28 GMT
etag: "62c7fd6c-1699"
expires: Fri, 17 May 2024 17:11:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/img/cl.png

118.107.246.54

200 OK

1.0 kB

URL GET HTTP/2
en-telegram.com/img/cl.png
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
PNG image data, 65 x 46, 8-bit/color RGBA, non-interlaced
Size
1.0 kB (1036 bytes)
Hash
07cec53b522a1fba620eb80c04ba71bc
7963f2df6e99cb03062dfa47fe8e777be214fa51
b16ea61cd69090ad248ba6aa130d202314eaed5dd7cfdb05c6a25d8e27abea4b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /img/cl.png HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: image/png
content-length: 1036
last-modified: Wed, 23 Dec 2020 06:09:46 GMT
etag: "5fe2df2a-40c"
expires: Fri, 17 May 2024 17:11:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/img/qiu.jpg

118.107.246.54

200 OK

1.5 kB

URL GET HTTP/2
en-telegram.com/img/qiu.jpg
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 16x16, components 3
Size
1.5 kB (1450 bytes)
Hash
87cf59695ff36d614acf503d77dfd6d6
b1824c43adb37f4ba413aca9555b818598c58332
5208b64cfad7cca2bffe9567a0832e3a689ed600ddef313b9ead70b99c25f793

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /img/qiu.jpg HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: image/jpeg
content-length: 1450
last-modified: Fri, 08 Jul 2022 09:46:17 GMT
etag: "62c7fce9-5aa"
expires: Fri, 17 May 2024 17:11:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/img/xjt.jpg

118.107.246.54

200 OK

1.2 kB

URL GET HTTP/2
en-telegram.com/img/xjt.jpg
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 8x4, components 3
Size
1.2 kB (1166 bytes)
Hash
32fbe57cdbc603970ce983068b1f8e42
e0219487886bd5678352b9db1426b28c4529e916
7e6302af6eca5c8092c5876cfc129e9824ffcba1da90d365de829da748cb58e1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /img/xjt.jpg HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: image/jpeg
content-length: 1166
last-modified: Fri, 08 Jul 2022 09:52:02 GMT
etag: "62c7fe42-48e"
expires: Fri, 17 May 2024 17:11:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/img/niao.jpg

118.107.246.54

200 OK

1.5 kB

URL GET HTTP/2
en-telegram.com/img/niao.jpg
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 21x18, components 3
Size
1.5 kB (1506 bytes)
Hash
d28dda0ad62c539c022b72fb8ac516af
73a28b1bfe7df3d0b53c8cb45c95e62a9cd6a6ce
e7a32317f703195da8ec7b1d6847c70f7dfc512f592add0da0185a974b82c790

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /img/niao.jpg HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: image/jpeg
content-length: 1506
last-modified: Fri, 08 Jul 2022 09:46:45 GMT
etag: "62c7fd05-5e2"
expires: Fri, 17 May 2024 17:11:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/img/android_img.png

118.107.246.54

200 OK

51 kB

URL GET HTTP/2
en-telegram.com/img/android_img.png
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
PNG image data, 200 x 240, 8-bit/color RGBA, non-interlaced
Size
51 kB (50795 bytes)
Hash
424d360a26103d31030c0f84846d3f7c
f091f3acbeb9da022d4d9d2e04b98b0b8527398b
1a915f2085240d13161d79743c6cd58987230cec7baf84c45e1b6681358e3321

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /img/android_img.png HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: image/png
content-length: 50795
last-modified: Fri, 08 Jul 2022 11:01:08 GMT
etag: "62c80e74-c66b"
expires: Fri, 17 May 2024 17:11:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/img/a01.jpg

118.107.246.54

200 OK

1.7 kB

URL GET HTTP/2
en-telegram.com/img/a01.jpg
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 20x25, components 3
Size
1.7 kB (1678 bytes)
Hash
7f0a104788c8689a0585650e403be994
42ba24ff567a81fc966ff5bc33bf42e2664fd204
2b192c38453f2016beea01c4ed12ba0332bfa413ca6fcafbcc5a77b881d20986

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /img/a01.jpg HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: image/jpeg
content-length: 1678
last-modified: Fri, 08 Jul 2022 10:54:13 GMT
etag: "62c80cd5-68e"
expires: Fri, 17 May 2024 17:11:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/img/a02.jpg

118.107.246.54

200 OK

1.6 kB

URL GET HTTP/2
en-telegram.com/img/a02.jpg
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 21x27, components 3
Size
1.6 kB (1637 bytes)
Hash
20b100aa708b997b7bf5b318948dec53
07dd81e421a1332aaf3e9a2e745af6068a7353ea
7b79d968cc7c354fd07ebc2ff38312688027d45793141916b050cb8d0a6ead14

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /img/a02.jpg HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: image/jpeg
content-length: 1637
last-modified: Fri, 08 Jul 2022 10:54:57 GMT
etag: "62c80d01-665"
expires: Fri, 17 May 2024 17:11:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/img/img1.png

118.107.246.54

200 OK

32 kB

URL GET HTTP/2
en-telegram.com/img/img1.png
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced
Size
32 kB (31567 bytes)
Hash
f1da614e4f1c7d9693de5e7020ebf448
c7e67bec1e2c7222ae4ff81eab0841a7e7989c4f
0aa4fb78388b7756bbb6a79b2cb51bc270d4f70f97460c8d2d522a1a048f99ea

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /img/img1.png HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: image/png
content-length: 31567
last-modified: Mon, 20 Jun 2022 09:03:11 GMT
etag: "62b037cf-7b4f"
expires: Fri, 17 May 2024 17:11:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/img/img2.png

118.107.246.54

200 OK

32 kB

URL GET HTTP/2
en-telegram.com/img/img2.png
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced
Size
32 kB (31509 bytes)
Hash
44b0da386f41ca70890789e8ca5e36e1
d7be86e9a4b5549d6b3c8091d9c7512924780b0a
9fdd04fdb2795957a6d133268ed6f079073458a52baee9df73415cb95f5b70d4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /img/img2.png HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: image/png
content-length: 31509
last-modified: Mon, 20 Jun 2022 09:03:11 GMT
etag: "62b037cf-7b15"
expires: Fri, 17 May 2024 17:11:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/img/img3.png

118.107.246.54

200 OK

45 kB

URL GET HTTP/2
en-telegram.com/img/img3.png
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced
Size
45 kB (44837 bytes)
Hash
950a4bdc38303578356add91a4d03a53
e565b512eb5302e84f4a73489727ee1b42deb362
d6a92125d16710cdc43004479af427b10244edb13f261fdc5c938944b6f378e8

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /img/img3.png HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: image/png
content-length: 44837
last-modified: Mon, 20 Jun 2022 09:03:11 GMT
etag: "62b037cf-af25"
expires: Fri, 17 May 2024 17:11:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/img/img4.png

118.107.246.54

200 OK

44 kB

URL GET HTTP/2
en-telegram.com/img/img4.png
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced
Size
44 kB (43771 bytes)
Hash
d7b242dd0847c3c4f93d25f61186e31a
d57beb0a7b48f5030c2438f9c2021395e60e6cfd
8885ca6cc87772523bb7f97af25c4e2a1c85bfd19cf2b257637f7d20e1d1fb9e

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /img/img4.png HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: image/png
content-length: 43771
last-modified: Mon, 20 Jun 2022 09:03:11 GMT
etag: "62b037cf-aafb"
expires: Fri, 17 May 2024 17:11:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/img/img5.png

118.107.246.54

200 OK

47 kB

URL GET HTTP/2
en-telegram.com/img/img5.png
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced
Size
47 kB (47186 bytes)
Hash
36ff8f718ef7c6a265c9cc428f9d15a6
6a0e598fbaa432557418be9901f5a61632775a51
b65cc3384a36c6b9224a621a7921d7d60d57b9ecaeee87d67a5819df59f5b5ff

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /img/img5.png HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: image/png
content-length: 47186
last-modified: Mon, 20 Jun 2022 09:03:12 GMT
etag: "62b037d0-b852"
expires: Fri, 17 May 2024 17:11:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/img/img6.png

118.107.246.54

200 OK

51 kB

URL GET HTTP/2
en-telegram.com/img/img6.png
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced
Size
51 kB (50754 bytes)
Hash
327d0fba447daca765acbc06814bc65b
584a8f7503c82834fb6fad089ca60ca156dff1c0
7e5b0657cbb971354238fce2dc7389224e7217726e26ddb3b9ffad7ee861114a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /img/img6.png HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: image/png
content-length: 50754
last-modified: Mon, 20 Jun 2022 09:03:12 GMT
etag: "62b037d0-c642"
expires: Fri, 17 May 2024 17:11:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/img/img7.png

118.107.246.54

200 OK

42 kB

URL GET HTTP/2
en-telegram.com/img/img7.png
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced
Size
42 kB (42253 bytes)
Hash
dbf0229e9576b521792e4e58718e82c7
75b06dd37a16fcd64e24268f93083cce947cad9b
2e046e10f8d2975289dd5d8263a2a2922dc5e265d5ce9262faa76c5a51f0553b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /img/img7.png HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: image/png
content-length: 42253
last-modified: Mon, 20 Jun 2022 09:03:12 GMT
etag: "62b037d0-a50d"
expires: Fri, 17 May 2024 17:11:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/img/img8.png

118.107.246.54

200 OK

40 kB

URL GET HTTP/2
en-telegram.com/img/img8.png
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced
Size
40 kB (39829 bytes)
Hash
af6567b0907caf4cbd54cb2d3d2ca627
8c8304b7d2d1732136d93b9d6565ad62751d06ce
89da4286b5bc616d936b7933af59fa621e1aec57d766d6a19d6b74e6808ddd37

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /img/img8.png HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: image/png
content-length: 39829
last-modified: Mon, 20 Jun 2022 09:03:12 GMT
etag: "62b037d0-9b95"
expires: Fri, 17 May 2024 17:11:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/img/img9.png

118.107.246.54

200 OK

60 kB

URL GET HTTP/2
en-telegram.com/img/img9.png
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced
Size
60 kB (59836 bytes)
Hash
3e7923b2f9f393ee8abd7a47c402a0b7
e5a5d437bd430141a63ca5b65976f98cd8ff5edf
2c68c4f70891e0b826fb8529683b304cb72527735b301a0ff0fa0f308f647741

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /img/img9.png HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: image/png
content-length: 59836
last-modified: Mon, 20 Jun 2022 09:03:12 GMT
etag: "62b037d0-e9bc"
expires: Fri, 17 May 2024 17:11:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/img/iphone_img3.png

118.107.246.54

200 OK

68 kB

URL GET HTTP/2
en-telegram.com/img/iphone_img3.png
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
PNG image data, 330 x 240, 8-bit/color RGBA, non-interlaced
Size
68 kB (67725 bytes)
Hash
52bd961a93e97801523f2b46cbd288ef
6379acf66bf18603a3524dd0f5b6413851ad9b0d
ec68290542061045f7cd16a28fdd3d1ef07dc66f5707aaaf665c5043d804cef1

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /img/iphone_img3.png HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: image/png
content-length: 67725
last-modified: Fri, 08 Jul 2022 10:59:51 GMT
etag: "62c80e27-1088d"
expires: Fri, 17 May 2024 17:11:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/img/a03.png

118.107.246.54

200 OK

146 kB

URL GET HTTP/2
en-telegram.com/img/a03.png
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
PNG image data, 572 x 217, 8-bit/color RGBA, non-interlaced
Size
146 kB (146410 bytes)
Hash
59a30b6c6e5753e7d27ac732f07d8179
93b4a9d7bc6d0c2d435e1a63b35f028ed8457253
17c23d13e8b34c8f50070b0cf1b79cc891bb2b3dd030028d8c2b09bfe016a234

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /img/a03.png HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: image/png
content-length: 146410
last-modified: Fri, 08 Jul 2022 12:10:45 GMT
etag: "62c81ec5-23bea"
expires: Fri, 17 May 2024 17:11:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/img/a04.png

118.107.246.54

200 OK

151 kB

URL GET HTTP/2
en-telegram.com/img/a04.png
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
PNG image data, 355 x 209, 8-bit/color RGBA, non-interlaced
Size
151 kB (150894 bytes)
Hash
a3a96038c4ebfb4bc54d5b342b207d8c
ab2775bb02a60f6aadc241c593db494bbf95da89
c305adc2429923d7d98e235c51e324a16023a8b35fe1dfbc642f39e787147c07

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /img/a04.png HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: image/png
content-length: 150894
last-modified: Fri, 08 Jul 2022 12:29:45 GMT
etag: "62c82339-24d6e"
expires: Fri, 17 May 2024 17:11:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/img/a05.png

118.107.246.54

200 OK

173 kB

URL GET HTTP/2
en-telegram.com/img/a05.png
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
PNG image data, 348 x 211, 8-bit/color RGBA, non-interlaced
Size
173 kB (173071 bytes)
Hash
fe3d01791a3f2fd410ae81bcaf0a9009
22413ff263a6806140dfc33a9272b534b84e6c20
87b4c410df7cd08ea5ee63e5c8d1067a5020c10adcbfad9e41c8a5bb3e3df597

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /img/a05.png HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: image/png
content-length: 173071
last-modified: Fri, 08 Jul 2022 12:30:13 GMT
etag: "62c82355-2a40f"
expires: Fri, 17 May 2024 17:11:24 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/favicon.ico

118.107.246.54

200 OK

4.3 kB

URL GET HTTP/2
en-telegram.com/favicon.ico
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Size
4.3 kB (4286 bytes)
Hash
f46eff2c81a103ba1aa28ca309dc51cf
126c053c4047385c6d58a5bd80b4a9450bd94128
eb0db14f617415eaeb21bdb481017f1e7ef1bb85916420d9d8f153763f9634e7

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:27 GMT
content-type: image/x-icon
content-length: 4286
last-modified: Sat, 09 Jul 2022 07:26:00 GMT
etag: "62c92d88-10be"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

en-telegram.com/js/jquery.min.js

118.107.246.54

200 OK

103 kB

URL GET HTTP/2
en-telegram.com/js/jquery.min.js
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type

Size
103 kB (102599 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /js/jquery.min.js HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: application/javascript
last-modified: Mon, 04 Sep 2017 06:32:45 GMT
vary: Accept-Encoding
etag: W/"59acf38d-190c7"
expires: Thu, 18 Apr 2024 05:11:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

en-telegram.com/js/jquery.flexslider-min.js

118.107.246.54

200 OK

21 kB

URL GET HTTP/2
en-telegram.com/js/jquery.flexslider-min.js
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
JavaScript source, ASCII text, with very long lines (21315), with CRLF line terminators
Size
21 kB (21414 bytes)
Hash
2b22ba873303e38db52d334001c9c35f
659986c36a7f19a2662ed3c5a000e1de11e36923
0e5d72c20e148edca04967ab4bff432f44264779dc5ecd81bd710eb487fdd145

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /js/jquery.flexslider-min.js HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: application/javascript
last-modified: Fri, 17 Dec 2021 04:51:42 GMT
vary: Accept-Encoding
etag: W/"61bc175e-53a6"
expires: Thu, 18 Apr 2024 05:11:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

en-telegram.com/css/style.css

118.107.246.54

200 OK

13 kB

URL GET HTTP/2
en-telegram.com/css/style.css
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
ASCII text, with CRLF line terminators
Size
13 kB (13236 bytes)
Hash
950837b83ecd874d4b6c3a1108e12791
ebfa00b3e205b4589c2b1c891ed195d2b546ce46
09603c0e420b9382629b4c1e57b94fe038bd8753904fe5fdb02fc5ea1fd79548

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /css/style.css HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: text/css
last-modified: Fri, 08 Jul 2022 13:10:32 GMT
vary: Accept-Encoding
etag: W/"62c82cc8-33b4"
expires: Thu, 18 Apr 2024 05:11:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

en-telegram.com/

118.107.246.54

200 OK

8.5 kB

URL User Request GET HTTP/2
en-telegram.com/
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (10678), with no line terminators
Size
8.5 kB (8526 bytes)
Hash
0a0e1874202697675473efc1e208133b
8b3d91a92e5cfdf6ada59013759f69443058a477
fd2b2735314b652d1ed085cd6dc5d7754075d4fd4890fc1b2173716c1c2c32b6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET / HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:23 GMT
content-type: text/html
last-modified: Sun, 20 Aug 2023 10:10:33 GMT
vary: Accept-Encoding
etag: W/"64e1e699-214e"
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

en-telegram.com/js/update.js

118.107.246.54

200 OK

3.0 kB

URL GET HTTP/2
en-telegram.com/js/update.js
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (3401), with no line terminators
Size
3.0 kB (3011 bytes)
Hash
17db36ce4d106b8d4ad046b4bf65402f
25569ce62ce52fcaa322c0852e23233c75d1ef3c
1d2a0de091bb25d0fe1b4049353319e57dfdca3feca900e96c1296b292c83e6d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /js/update.js HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: application/javascript
last-modified: Fri, 17 Dec 2021 04:51:45 GMT
vary: Accept-Encoding
etag: W/"61bc1761-bc3"
expires: Thu, 18 Apr 2024 05:11:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

en-telegram.com/js/jquery-1.7.2.min.js

118.107.246.54

200 OK

95 kB

URL GET HTTP/2
en-telegram.com/js/jquery-1.7.2.min.js
IP
118.107.246.54:443
ASN
#132825 MYTEK TRADING PTY LTD

Requested by
https://en-telegram.com/
Certificate
IssuerLet's Encrypt
Subjecten-telegram.com
Fingerprint47:8A:E4:1B:E6:DA:55:B7:16:8D:27:49:2B:A3:E0:C0:A6:F5:55:73
ValiditySat, 02 Mar 2024 07:00:46 GMT - Fri, 31 May 2024 07:00:45 GMT

File type

Size
95 kB (94840 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /js/jquery-1.7.2.min.js HTTP/1.1
Host: en-telegram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://en-telegram.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 17 Apr 2024 17:11:24 GMT
content-type: application/javascript
last-modified: Fri, 17 Dec 2021 04:51:44 GMT
vary: Accept-Encoding
etag: W/"61bc1760-17278"
expires: Thu, 18 Apr 2024 05:11:24 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (29)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2