| |  47.246.44.239 | 200 OK | 4.5 kB |
URL User Request GET HTTP/1.1IP47.246.44.239:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
File typeHTML document, Unicode text, UTF-8 text, with very long lines (1148) Hash77282fbb974e7080bc94a891c7169531 c985631ea1565829f70eb51bf1f3d05eed1b0840 f2c27f509f9e04c6d506698dd449ca82447b0922396cb7edacd6dbbec6441eaa
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/html
Content-Length: 4511
Connection: keep-alive
Date: Thu, 25 Apr 2024 20:19:29 GMT
Vary: Accept-Encoding
x-oss-request-id: 662ABAD184CC8A39371E5F6B
x-oss-cdn-auth: success
Last-Modified: Tue, 25 Jul 2023 01:42:43 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 1588831781034317
x-oss-storage-class: Standard
Content-MD5: dygvu5dOcIC8lKiRxxaVMQ==
x-oss-server-time: 2
Content-Encoding: gzip
Ali-Swift-Global-Savetime: 1714076369
Via: cache21.l2de2[0,0,200-0,H], cache26.l2de2[0,0], ens-cache1.se2[0,0,200-0,H], ens-cache19.se2[1,0]
Age: 29481
X-Cache: HIT TCP_HIT dirn:9:290858540
X-Swift-SaveTime: Fri, 26 Apr 2024 00:09:29 GMT
X-Swift-CacheTime: 2578200
Timing-Allow-Origin: *
EagleId: 2ff62ca717141058503592491e
|
|
| GET www.telegramns.com/js/tab.min.js | 47.246.44.243 | 200 OK | 913 B |
URL GET HTTP/1.1www.telegramns.com/js/tab.min.js IP47.246.44.243:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.telegramns.com/
File typeJavaScript source, ASCII text, with very long lines (2052), with no line terminators Hashe0b305e84cf223a6396efd6499b4397e aee3cab7523253a7f03b2e4a5b65dda390dc64e0 8780e3208b3913d633d1c780e328dbe3ae414657212793f3f7f928d5fe29be39
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /js/tab.min.js HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 913
Connection: keep-alive
Date: Thu, 25 Apr 2024 22:54:57 GMT
Vary: Accept-Encoding
x-oss-request-id: 662ADF41D7863C3139CB7A6F
x-oss-cdn-auth: success
Last-Modified: Wed, 19 Jul 2023 11:20:09 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 10097663757414412764
x-oss-storage-class: Standard
Content-MD5: 4LMF6EzyI6Y5bv1kmbQ5fg==
x-oss-server-time: 16
Content-Encoding: gzip
Ali-Swift-Global-Savetime: 1714085698
Via: cache17.l2de2[0,0,200-0,H], cache4.l2de2[1,0], ens-cache12.se2[32,32,200-0,M], ens-cache11.se2[33,0]
Age: 20152
X-Cache: MISS TCP_MISS dirn:10:7809298
X-Swift-SaveTime: Fri, 26 Apr 2024 04:30:50 GMT
X-Swift-CacheTime: 2571848
Timing-Allow-Origin: *
EagleId: 2ff62c9f17141058506997339e
|
|
| GET www.telegramns.com/css/nav.css | 47.246.44.243 | 200 OK | 6.8 kB |
URL GET HTTP/1.1www.telegramns.com/css/nav.css IP47.246.44.243:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.telegramns.com/
File typeASCII text, with very long lines (16634), with no line terminators Hash5d01a194c2bc0764b3270aa5b97c98d3 cadf29db2d024a6ba36ddea1bb939bb2ccefef5c 789adf24ec79f96b0d5bec1f097d7733827bfdba1d7c5807558dcbfa31fe4c04
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /css/nav.css HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/css
Content-Length: 6761
Connection: keep-alive
Date: Thu, 25 Apr 2024 22:54:57 GMT
Vary: Accept-Encoding
x-oss-request-id: 662ADF4184CC8A383887B42B
x-oss-cdn-auth: success
Last-Modified: Wed, 19 Jul 2023 11:20:13 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 16630848856125754192
x-oss-storage-class: Standard
Content-MD5: XQGhlMK8B2SzJwqluXyY0w==
x-oss-server-time: 2
Content-Encoding: gzip
Ali-Swift-Global-Savetime: 1714085697
Via: cache25.l2de2[0,0,200-0,H], cache6.l2de2[1,0], ens-cache3.se2[77,77,200-0,M], ens-cache12.se2[78,0]
Age: 20153
X-Cache: MISS TCP_MISS dirn:9:87555477
X-Swift-SaveTime: Fri, 26 Apr 2024 04:30:50 GMT
X-Swift-CacheTime: 2571847
Timing-Allow-Origin: *
EagleId: 2ff62ca017141058506713009e
|
|
| GET www.telegramns.com/css/home.css | 47.246.44.243 | 200 OK | 2.4 kB |
URL GET HTTP/1.1www.telegramns.com/css/home.css IP47.246.44.243:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.telegramns.com/
File typeASCII text, with very long lines (9469), with no line terminators Hashdf4c59633097f13fcc0374abb4c427ea 1d0f606b70280a9cbc7d71ef2a5681a9b682c359 97973f13229ea87a346790ba680f2888e858475bc04b749b968c93b2b04b13c9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /css/home.css HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/css
Content-Length: 2390
Connection: keep-alive
Date: Thu, 25 Apr 2024 22:54:57 GMT
Vary: Accept-Encoding
x-oss-request-id: 662ADF4131C32F363333CA5B
x-oss-cdn-auth: success
Last-Modified: Wed, 19 Jul 2023 11:20:13 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 5618237768647911939
x-oss-storage-class: Standard
Content-MD5: 30xZYzCX8T/MA3SrtMQn6g==
x-oss-server-time: 4
Content-Encoding: gzip
Ali-Swift-Global-Savetime: 1714085697
Via: cache5.l2de2[0,0,200-0,H], cache25.l2de2[1,0], ens-cache12.se2[85,85,200-0,M], ens-cache16.se2[87,0]
Age: 20153
X-Cache: MISS TCP_MISS dirn:11:331972708
X-Swift-SaveTime: Fri, 26 Apr 2024 04:30:50 GMT
X-Swift-CacheTime: 2571847
Timing-Allow-Origin: *
EagleId: 2ff62ca417141058506737066e
|
|
| GET www.telegramns.com/css/global.css | 47.246.44.239 | 200 OK | 3.1 kB |
URL GET HTTP/1.1www.telegramns.com/css/global.css IP47.246.44.239:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.telegramns.com/
File typeASCII text, with very long lines (12759), with no line terminators Hashd53f647e718abac5c1530f190eccb38f bc62971600d7f085de6165719caff2dd0d72bde0 583a4524be46882cedfd204726ff358b385ce699c9c9d8e8be38807a571cad04
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /css/global.css HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: text/css
Content-Length: 3088
Connection: keep-alive
Date: Thu, 25 Apr 2024 22:54:57 GMT
Vary: Accept-Encoding
x-oss-request-id: 662ADF4131C32F353742C95B
x-oss-cdn-auth: success
Last-Modified: Wed, 19 Jul 2023 11:20:13 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8054294639893629695
x-oss-storage-class: Standard
Content-MD5: 1T9kfnGKusXBUw8ZDsyzjw==
x-oss-server-time: 4
Content-Encoding: gzip
Ali-Swift-Global-Savetime: 1714085697
Via: cache12.l2de2[0,0,200-0,H], cache5.l2de2[1,0], ens-cache20.se2[88,88,200-0,M], ens-cache19.se2[90,0]
Age: 20153
X-Cache: MISS TCP_MISS dirn:11:154563767
X-Swift-SaveTime: Fri, 26 Apr 2024 04:30:50 GMT
X-Swift-CacheTime: 2571847
Timing-Allow-Origin: *
EagleId: 2ff62ca717141058506782604e
|
|
| GET www.telegramns.com/js/jquery.min.js | 47.246.44.243 | 200 OK | 33 kB |
URL GET HTTP/1.1www.telegramns.com/js/jquery.min.js IP47.246.44.243:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.telegramns.com/
File typeJavaScript source, ASCII text, with very long lines (31998) Hash674057c689564e86e2f3af8f663a0cb8 58f771d8fe6da6fb466e638999636a3e283f6915 ed5509f510692a2c583d7c87670af0bbb474bed31b999dd7ccb16ee66a368180
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /js/jquery.min.js HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 33323
Connection: keep-alive
Date: Thu, 25 Apr 2024 22:54:58 GMT
Vary: Accept-Encoding
x-oss-request-id: 662ADF414F7BC430386CA3BD
x-oss-cdn-auth: success
Last-Modified: Wed, 19 Jul 2023 11:20:09 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 14318732161643785234
x-oss-storage-class: Standard
Content-MD5: Z0BXxolWTobi86+PZjoMuA==
x-oss-server-time: 44
Content-Encoding: gzip
Ali-Swift-Global-Savetime: 1714085698
Via: cache14.l2de2[0,0,200-0,H], cache8.l2de2[1,0], ens-cache18.se2[57,57,200-0,M], ens-cache18.se2[58,0]
Age: 20152
X-Cache: MISS TCP_MISS dirn:11:392355894
X-Swift-SaveTime: Fri, 26 Apr 2024 04:30:50 GMT
X-Swift-CacheTime: 2571848
Timing-Allow-Origin: *
EagleId: 2ff62ca617141058507036133e
|
|
| GET www.telegramns.com/images/1646289963408995.png | 47.246.44.243 | 200 OK | 11 kB |
URL GET HTTP/1.1www.telegramns.com/images/1646289963408995.png IP47.246.44.243:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.telegramns.com/
File typePNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced Hash2c84be4c4dec401d09a64498cbbd382d 1c7053b083d5e59ed5cb4912c5500f39beaf765e 88afe4caad9d3ef9d7b4a5301d1b2b4378b54d233038079f0145e2f387f4eed9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /images/1646289963408995.png HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 11449
Connection: keep-alive
Date: Thu, 25 Apr 2024 22:54:57 GMT
x-oss-request-id: 662ADF4184CC8A39381AB52B
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "2C84BE4C4DEC401D09A64498CBBD382D"
Last-Modified: Wed, 19 Jul 2023 11:20:10 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12967283916452176681
x-oss-storage-class: Standard
Content-MD5: LIS+TE3sQB0JpkSYy704LQ==
x-oss-server-time: 5
Ali-Swift-Global-Savetime: 1714085697
Via: cache8.l2de2[0,0,200-0,H], cache9.l2de2[1,0], ens-cache4.se2[0,0,200-0,H], ens-cache16.se2[1,0]
Age: 20153
X-Cache: HIT TCP_HIT dirn:9:312387757
X-Swift-SaveTime: Fri, 26 Apr 2024 00:09:31 GMT
X-Swift-CacheTime: 2587526
Timing-Allow-Origin: *
EagleId: 2ff62ca417141058507767092e
|
|
| GET www.telegramns.com/images/list-pic29.png | 47.246.44.243 | 200 OK | 60 kB |
URL GET HTTP/1.1www.telegramns.com/images/list-pic29.png IP47.246.44.243:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.telegramns.com/
File typePNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced Hash3e7923b2f9f393ee8abd7a47c402a0b7 e5a5d437bd430141a63ca5b65976f98cd8ff5edf 2c68c4f70891e0b826fb8529683b304cb72527735b301a0ff0fa0f308f647741
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /images/list-pic29.png HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 59836
Connection: keep-alive
Date: Thu, 25 Apr 2024 22:54:59 GMT
x-oss-request-id: 662ADF4384CC8A3838E2CB2B
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "3E7923B2F9F393EE8ABD7A47C402A0B7"
Last-Modified: Wed, 19 Jul 2023 11:20:10 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2434880472780418657
x-oss-storage-class: Standard
Content-MD5: Pnkjsvnzk+6KvXpHxAKgtw==
x-oss-server-time: 4
Ali-Swift-Global-Savetime: 1714085699
Via: cache26.l2de2[0,0,200-0,H], cache26.l2de2[1,0], ens-cache15.se2[0,0,200-0,H], ens-cache12.se2[2,0]
Age: 20151
X-Cache: HIT TCP_HIT dirn:11:451927343
X-Swift-SaveTime: Fri, 26 Apr 2024 00:09:31 GMT
X-Swift-CacheTime: 2587528
Timing-Allow-Origin: *
EagleId: 2ff62ca017141058507743037e
|
|
| GET www.googletagmanager.com/gtag/js?id=AW-11272310475 |  142.250.74.168 | 200 OK | 82 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=AW-11272310475 IP142.250.74.168:443
Requested byhttp://www.telegramns.com/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint1E:33:2E:4B:C3:51:05:B7:73:DC:21:BF:3E:02:B3:16:D8:0B:AB:BB ValidityMon, 18 Mar 2024 19:37:14 GMT - Mon, 10 Jun 2024 19:37:13 GMT
File typeJavaScript source, ASCII text, with very long lines (4179) Hashe1778e415a8adb43a9ad6faeac48e005 614eeb01f8c11f51aa556c05873fa818d70a8116 e95ad2cd580c0b5c1482efc6b78d30d2c026344b56dee9d3e10c78432d10ef5c
GET /gtag/js?id=AW-11272310475 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 26 Apr 2024 04:30:50 GMT
expires: Fri, 26 Apr 2024 04:30:50 GMT
cache-control: private, max-age=900
last-modified: Fri, 26 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 81833
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET www.telegramns.com/images/list-pic22.png | 47.246.44.239 | 200 OK | 32 kB |
URL GET HTTP/1.1www.telegramns.com/images/list-pic22.png IP47.246.44.239:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.telegramns.com/
File typePNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced Hash44b0da386f41ca70890789e8ca5e36e1 d7be86e9a4b5549d6b3c8091d9c7512924780b0a 9fdd04fdb2795957a6d133268ed6f079073458a52baee9df73415cb95f5b70d4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /images/list-pic22.png HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 31509
Connection: keep-alive
Date: Thu, 25 Apr 2024 22:54:58 GMT
x-oss-request-id: 662ADF4231C32F363474D25B
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "44B0DA386F41CA70890789E8CA5E36E1"
Last-Modified: Wed, 19 Jul 2023 11:20:12 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2260192672891429983
x-oss-storage-class: Standard
Content-MD5: RLDaOG9BynCJB4noyl424Q==
x-oss-server-time: 2
Ali-Swift-Global-Savetime: 1714085698
Via: cache8.l2de2[0,0,200-0,H], cache10.l2de2[2,0], ens-cache9.se2[0,0,200-0,H], ens-cache19.se2[1,0]
Age: 20152
X-Cache: HIT TCP_HIT dirn:11:6894564
X-Swift-SaveTime: Fri, 26 Apr 2024 00:09:31 GMT
X-Swift-CacheTime: 2587527
Timing-Allow-Origin: *
EagleId: 2ff62ca717141058507892639e
|
|
| GET www.telegramns.com/images/list-pic24.png | 47.246.44.243 | 200 OK | 44 kB |
URL GET HTTP/1.1www.telegramns.com/images/list-pic24.png IP47.246.44.243:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.telegramns.com/
File typePNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced Hashd7b242dd0847c3c4f93d25f61186e31a d57beb0a7b48f5030c2438f9c2021395e60e6cfd 8885ca6cc87772523bb7f97af25c4e2a1c85bfd19cf2b257637f7d20e1d1fb9e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /images/list-pic24.png HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 43771
Connection: keep-alive
Date: Thu, 25 Apr 2024 22:54:57 GMT
x-oss-request-id: 662ADF4127077C3135352279
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "D7B242DD0847C3C4F93D25F61186E31A"
Last-Modified: Wed, 19 Jul 2023 11:20:13 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3784044005605468223
x-oss-storage-class: Standard
Content-MD5: 17JC3QhHw8T5PSX2EYbjGg==
x-oss-server-time: 4
Ali-Swift-Global-Savetime: 1714085698
Via: cache9.l2de2[0,0,200-0,H], cache4.l2de2[1,0], ens-cache3.se2[0,0,200-0,H], ens-cache16.se2[2,0]
Age: 20152
X-Cache: HIT TCP_HIT dirn:9:83804173
X-Swift-SaveTime: Fri, 26 Apr 2024 00:09:31 GMT
X-Swift-CacheTime: 2587527
Timing-Allow-Origin: *
EagleId: 2ff62ca417141058507947100e
|
|
| GET www.telegramns.com/images/list-pic23.png | 47.246.44.243 | 200 OK | 45 kB |
URL GET HTTP/1.1www.telegramns.com/images/list-pic23.png IP47.246.44.243:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.telegramns.com/
File typePNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced Hash950a4bdc38303578356add91a4d03a53 e565b512eb5302e84f4a73489727ee1b42deb362 d6a92125d16710cdc43004479af427b10244edb13f261fdc5c938944b6f378e8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /images/list-pic23.png HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 44837
Connection: keep-alive
Date: Thu, 25 Apr 2024 22:54:57 GMT
x-oss-request-id: 662ADF418CC99F3539BC8D4C
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "950A4BDC38303578356ADD91A4D03A53"
Last-Modified: Wed, 19 Jul 2023 11:20:12 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3398424817460028290
x-oss-storage-class: Standard
Content-MD5: lQpL3DgwNXg1at2RpNA6Uw==
x-oss-server-time: 3
Ali-Swift-Global-Savetime: 1714085698
Via: cache8.l2de2[0,0,200-0,H], cache14.l2de2[1,0], ens-cache7.se2[0,0,200-0,H], ens-cache18.se2[1,0]
Age: 20152
X-Cache: HIT TCP_HIT dirn:11:273651098
X-Swift-SaveTime: Fri, 26 Apr 2024 00:09:31 GMT
X-Swift-CacheTime: 2587527
Timing-Allow-Origin: *
EagleId: 2ff62ca617141058507916155e
|
|
| GET www.telegramns.com/images/list-pic21.png | 47.246.44.243 | 200 OK | 32 kB |
URL GET HTTP/1.1www.telegramns.com/images/list-pic21.png IP47.246.44.243:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.telegramns.com/
File typePNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced Hashf1da614e4f1c7d9693de5e7020ebf448 c7e67bec1e2c7222ae4ff81eab0841a7e7989c4f 0aa4fb78388b7756bbb6a79b2cb51bc270d4f70f97460c8d2d522a1a048f99ea
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /images/list-pic21.png HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 31567
Connection: keep-alive
Date: Thu, 25 Apr 2024 22:54:57 GMT
x-oss-request-id: 662ADF4131C32F363585CA5B
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "F1DA614E4F1C7D9693DE5E7020EBF448"
Last-Modified: Wed, 19 Jul 2023 11:20:12 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 16294650479540539013
x-oss-storage-class: Standard
Content-MD5: 8dphTk8cfZaT3l5wIOv0SA==
x-oss-server-time: 6
Ali-Swift-Global-Savetime: 1714085697
Via: cache8.l2de2[0,0,200-0,H], cache21.l2de2[1,0], ens-cache16.se2[0,0,200-0,H], ens-cache11.se2[1,0]
Age: 20153
X-Cache: HIT TCP_HIT dirn:11:77050611
X-Swift-SaveTime: Fri, 26 Apr 2024 00:09:31 GMT
X-Swift-CacheTime: 2587526
Timing-Allow-Origin: *
EagleId: 2ff62c9f17141058507847357e
|
|
| GET www.telegramns.com/images/list-pic26.png | 47.246.44.243 | 200 OK | 13 kB |
URL GET HTTP/1.1www.telegramns.com/images/list-pic26.png IP47.246.44.243:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.telegramns.com/
File typePNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced Hash9c2a194ee50807ae9342b60634be2445 553dfd2ba2a5e11468a3b57aba897995f2f4d676 ec1788bcdd05595bbcd16e5c7c13bce6481b620ebbc4200b2e6598c02c82aa78
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /images/list-pic26.png HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 12690
Connection: keep-alive
Date: Thu, 25 Apr 2024 22:54:58 GMT
x-oss-request-id: 662ADF4284CC8A383711C62B
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "9C2A194EE50807AE9342B60634BE2445"
Last-Modified: Wed, 19 Jul 2023 11:20:13 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 1007851235871798020
x-oss-storage-class: Standard
Content-MD5: nCoZTuUIB66TQrYGNL4kRQ==
x-oss-server-time: 4
Ali-Swift-Global-Savetime: 1714085698
Via: cache16.l2de2[0,0,200-0,H], cache19.l2de2[1,0], ens-cache9.se2[0,0,200-0,H], ens-cache12.se2[1,0]
Age: 20152
X-Cache: HIT TCP_HIT dirn:11:6894228
X-Swift-SaveTime: Fri, 26 Apr 2024 00:09:31 GMT
X-Swift-CacheTime: 2587527
Timing-Allow-Origin: *
EagleId: 2ff62ca017141058508633061e
|
|
| GET www.telegramns.com/images/list-pic28.png | 47.246.44.243 | 200 OK | 40 kB |
URL GET HTTP/1.1www.telegramns.com/images/list-pic28.png IP47.246.44.243:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.telegramns.com/
File typePNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced Hashaf6567b0907caf4cbd54cb2d3d2ca627 8c8304b7d2d1732136d93b9d6565ad62751d06ce 89da4286b5bc616d936b7933af59fa621e1aec57d766d6a19d6b74e6808ddd37
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /images/list-pic28.png HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 39829
Connection: keep-alive
Date: Thu, 25 Apr 2024 22:54:59 GMT
x-oss-request-id: 662ADF4331C32F35337FE05B
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "AF6567B0907CAF4CBD54CB2D3D2CA627"
Last-Modified: Wed, 19 Jul 2023 11:20:10 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12260604796391242357
x-oss-storage-class: Standard
Content-MD5: r2VnsJB8r0y9VMstPSymJw==
x-oss-server-time: 5
Ali-Swift-Global-Savetime: 1714085699
Via: cache4.l2de2[0,0,200-0,H], cache14.l2de2[1,0], ens-cache6.se2[0,0,200-0,H], ens-cache16.se2[1,0]
Age: 20151
X-Cache: HIT TCP_HIT dirn:11:379116509
X-Swift-SaveTime: Fri, 26 Apr 2024 00:09:31 GMT
X-Swift-CacheTime: 2587528
Timing-Allow-Origin: *
EagleId: 2ff62ca417141058509287146e
|
|
| GET www.telegramns.com/images/list-pic25.png | 47.246.44.239 | 200 OK | 18 kB |
URL GET HTTP/1.1www.telegramns.com/images/list-pic25.png IP47.246.44.239:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.telegramns.com/
File typePNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced Hashb1b335ef3116be9e1e4cd88b91e63581 3f729a0397768d41e4a6ea349787a61d8b63225e f6e5a71f6bd4a6af4813838f68f21e114e6582fbbf0edcd94f40745251937015
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /images/list-pic25.png HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 17628
Connection: keep-alive
Date: Thu, 25 Apr 2024 22:54:58 GMT
x-oss-request-id: 662ADF4284CC8A3738AEC42B
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "B1B335EF3116BE9E1E4CD88B91E63581"
Last-Modified: Wed, 19 Jul 2023 11:20:13 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 14224781113264124105
x-oss-storage-class: Standard
Content-MD5: sbM17zEWvp4eTNiLkeY1gQ==
x-oss-server-time: 2
Ali-Swift-Global-Savetime: 1714085698
Via: cache6.l2de2[0,0,200-0,H], cache12.l2de2[1,0], ens-cache16.se2[0,0,200-0,H], ens-cache19.se2[1,0]
Age: 20152
X-Cache: HIT TCP_HIT dirn:9:112702901
X-Swift-SaveTime: Fri, 26 Apr 2024 00:09:31 GMT
X-Swift-CacheTime: 2587527
Timing-Allow-Origin: *
EagleId: 2ff62ca717141058509402679e
|
|
| GET www.telegramns.com/images/list-pic27.png | 47.246.44.243 | 200 OK | 42 kB |
URL GET HTTP/1.1www.telegramns.com/images/list-pic27.png IP47.246.44.243:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.telegramns.com/
File typePNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced Hashdbf0229e9576b521792e4e58718e82c7 75b06dd37a16fcd64e24268f93083cce947cad9b 2e046e10f8d2975289dd5d8263a2a2922dc5e265d5ce9262faa76c5a51f0553b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /images/list-pic27.png HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 42253
Connection: keep-alive
Date: Thu, 25 Apr 2024 22:54:58 GMT
x-oss-request-id: 662ADF428CC99F383187994C
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "DBF0229E9576B521792E4E58718E82C7"
Last-Modified: Wed, 19 Jul 2023 11:20:12 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 153328924949271018
x-oss-storage-class: Standard
Content-MD5: 2/AinpV2tSF5Lk5YcY6Cxw==
x-oss-server-time: 4
Ali-Swift-Global-Savetime: 1714085699
Via: cache26.l2de2[0,0,200-0,H], cache2.l2de2[1,0], ens-cache2.se2[0,0,200-0,H], ens-cache18.se2[1,0]
Age: 20151
X-Cache: HIT TCP_HIT dirn:9:390767566
X-Swift-SaveTime: Fri, 26 Apr 2024 00:09:31 GMT
X-Swift-CacheTime: 2587528
Timing-Allow-Origin: *
EagleId: 2ff62ca617141058509406203e
|
|
| GET www.telegramns.com/images/SiteLogos.png | 47.246.44.243 | 200 OK | 2.0 kB |
URL GET HTTP/1.1www.telegramns.com/images/SiteLogos.png IP47.246.44.243:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.telegramns.com/
File typePNG image data, 21 x 120, 8-bit/color RGBA, non-interlaced Hashcba400c638c2081ce8798e24f95eab6a daee39e625008d0d8c3e13b23660391dc4d47e67 389eb664948dda8c5afdd43719ddfcee49d1332a1306dd717c8505755482cf51
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /images/SiteLogos.png HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/css/nav.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 1959
Connection: keep-alive
Date: Thu, 25 Apr 2024 22:54:59 GMT
x-oss-request-id: 662ADF4331C32F36350AE15B
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "CBA400C638C2081CE8798E24F95EAB6A"
Last-Modified: Wed, 19 Jul 2023 11:20:10 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3785043255568797186
x-oss-storage-class: Standard
Content-MD5: y6QAxjjCCBzoeY4k+V6rag==
x-oss-server-time: 4
Ali-Swift-Global-Savetime: 1714085699
Via: cache10.l2de2[0,0,200-0,H], cache21.l2de2[1,0], ens-cache1.se2[0,0,200-0,H], ens-cache16.se2[4,0]
Age: 20151
X-Cache: HIT TCP_HIT dirn:10:384211078
X-Swift-SaveTime: Fri, 26 Apr 2024 00:09:31 GMT
X-Swift-CacheTime: 2587528
Timing-Allow-Origin: *
EagleId: 2ff62ca417141058509517153e
|
|
| GET www.telegramns.com/images/SiteDesktop.png | 47.246.44.243 | 200 OK | 98 kB |
URL GET HTTP/1.1www.telegramns.com/images/SiteDesktop.png IP47.246.44.243:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.telegramns.com/
File typePNG image data, 400 x 270, 8-bit/color RGB, non-interlaced Hash18accece49f7384fb170791f6f806b0e 8aefc1182a90df17ff671e8e0fed1e4f050cf4d0 501f30155de6af28878364dadf8a702702cfd1fd80fa4c7baeece9ef316a5a48
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /images/SiteDesktop.png HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/css/nav.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 97867
Connection: keep-alive
Date: Thu, 25 Apr 2024 22:54:58 GMT
x-oss-request-id: 662ADF424F7BC430332DA4BD
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "18ACCECE49F7384FB170791F6F806B0E"
Last-Modified: Wed, 19 Jul 2023 11:20:10 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 11760687548940905601
x-oss-storage-class: Standard
Content-MD5: GKzOzkn3OE+xcHkfb4BrDg==
x-oss-server-time: 5
Ali-Swift-Global-Savetime: 1714085698
Via: cache19.l2de2[0,0,200-0,H], cache17.l2de2[2,0], ens-cache18.se2[0,0,200-0,H], ens-cache12.se2[2,0]
Age: 20152
X-Cache: HIT TCP_HIT dirn:10:65243845
X-Swift-SaveTime: Fri, 26 Apr 2024 00:09:31 GMT
X-Swift-CacheTime: 2587527
Timing-Allow-Origin: *
EagleId: 2ff62ca017141058509483086e
|
|
| GET www.telegramns.com/images/SiteAndroid.jpg | 47.246.44.243 | 200 OK | 21 kB |
URL GET HTTP/1.1www.telegramns.com/images/SiteAndroid.jpg IP47.246.44.243:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.telegramns.com/
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 290x270, components 3 Hashf5eb8dcf9b18f19053034101e920574e 9513c6c5e39669ad27132d470008955dbaae61f0 15a94720d72ed1727fb281ed4af914e17cd8166bb18f5a8484f32f9faff4f365
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /images/SiteAndroid.jpg HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/css/nav.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 21090
Connection: keep-alive
Date: Thu, 25 Apr 2024 22:54:58 GMT
x-oss-request-id: 662ADF4234FAB634307886B3
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "F5EB8DCF9B18F19053034101E920574E"
Last-Modified: Wed, 19 Jul 2023 11:20:11 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7133940369514553672
x-oss-storage-class: Standard
Content-MD5: 9euNz5sY8ZBTA0EB6SBXTg==
x-oss-server-time: 3
Ali-Swift-Global-Savetime: 1714085698
Via: cache25.l2de2[0,0,200-0,H], cache17.l2de2[1,0], ens-cache3.se2[0,0,200-0,H], ens-cache11.se2[1,0]
Age: 20152
X-Cache: HIT TCP_HIT dirn:9:83807342
X-Swift-SaveTime: Fri, 26 Apr 2024 00:09:31 GMT
X-Swift-CacheTime: 2587527
Timing-Allow-Origin: *
EagleId: 2ff62c9f17141058509607423e
|
|
| GET www.telegramns.com/images/telegram-an.png | 47.246.44.243 | 200 OK | 10 kB |
URL GET HTTP/1.1www.telegramns.com/images/telegram-an.png IP47.246.44.243:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.telegramns.com/
File typePNG image data, 400 x 400, 8-bit/color RGB, non-interlaced Hash57df5e1fb32d6c68069495bc13677482 483e680aca68819e9678be122d568385e4d06f60 47eb66a016eb8857ec6c2e54f2650462257ba94ca688c708bd7359ab8f135cd6
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /images/telegram-an.png HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/css/global.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/png
Content-Length: 10109
Connection: keep-alive
Date: Thu, 25 Apr 2024 22:54:59 GMT
x-oss-request-id: 662ADF4327077C3934B43179
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "57DF5E1FB32D6C68069495BC13677482"
Last-Modified: Wed, 19 Jul 2023 11:20:10 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3289930142575471576
x-oss-storage-class: Standard
Content-MD5: V99eH7MtbGgGlJW8E2d0gg==
x-oss-server-time: 20
Ali-Swift-Global-Savetime: 1714085699
Via: cache4.l2de2[0,0,200-0,H], cache19.l2de2[1,0], ens-cache1.se2[0,0,200-0,H], ens-cache18.se2[2,0]
Age: 20151
X-Cache: HIT TCP_HIT dirn:11:306162277
X-Swift-SaveTime: Fri, 26 Apr 2024 00:09:31 GMT
X-Swift-CacheTime: 2587528
Timing-Allow-Origin: *
EagleId: 2ff62ca617141058509666211e
|
|
| GET www.telegramns.com/images/SiteiOS.jpg | 47.246.44.239 | 200 OK | 31 kB |
URL GET HTTP/1.1www.telegramns.com/images/SiteiOS.jpg IP47.246.44.239:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.telegramns.com/
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 442x270, components 3 Hash89486a05599a1cfd549f8fb2d70e7d73 24867697525df19b88e79d75ff32384eba57b321 5a2c666b6e4f30ff921353cd9a3eccc09b9314c5c5ab11e1a3928936e497b2dc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /images/SiteiOS.jpg HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/css/nav.css
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: image/jpeg
Content-Length: 31305
Connection: keep-alive
Date: Thu, 25 Apr 2024 22:54:58 GMT
x-oss-request-id: 662ADF4284CC8A393344C42B
x-oss-cdn-auth: success
Accept-Ranges: bytes
ETag: "89486A05599A1CFD549F8FB2D70E7D73"
Last-Modified: Wed, 19 Jul 2023 11:20:12 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17428376461794317855
x-oss-storage-class: Standard
Content-MD5: iUhqBVmaHP1Un4+y1w59cw==
x-oss-server-time: 5
Ali-Swift-Global-Savetime: 1714085698
Via: cache12.l2de2[0,0,200-0,H], cache5.l2de2[0,0], ens-cache17.se2[0,0,200-0,H], ens-cache19.se2[1,0]
Age: 20152
X-Cache: HIT TCP_HIT dirn:9:87037510
X-Swift-SaveTime: Fri, 26 Apr 2024 00:09:31 GMT
X-Swift-CacheTime: 2587527
Timing-Allow-Origin: *
EagleId: 2ff62ca717141058509662684e
|
|
| GET www.telegramns.com/js/matomo.js | 47.246.44.243 | 200 OK | 21 kB |
URL GET HTTP/1.1www.telegramns.com/js/matomo.js IP47.246.44.243:80 ASN#24429 Zhejiang Taobao Network Co.,Ltd
Requested byhttp://www.telegramns.com/
File typeJavaScript source, ASCII text, with very long lines (63519) Hashe5461eb0cef4256771e360d6306c3033 f31a23f1e2d15a7a03992010c359833efba3e6b8 78c25da6082dd620e0fe7f12d7ef6e3c6015304575d9ced465b4e84e15a7d82a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /js/matomo.js HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/javascript
Content-Length: 21320
Connection: keep-alive
Date: Thu, 25 Apr 2024 20:19:36 GMT
Vary: Accept-Encoding
x-oss-request-id: 662ABAD834FAB6303709DEF2
x-oss-cdn-auth: success
Last-Modified: Wed, 19 Jul 2023 11:20:09 GMT
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 1289602963805335425
x-oss-storage-class: Standard
Content-MD5: 5UYesM70JWdx42DWMGwwMw==
x-oss-server-time: 37
Content-Encoding: gzip
Ali-Swift-Global-Savetime: 1714076376
Via: cache5.l2de2[0,0,200-0,H], cache11.l2de2[1,0], ens-cache15.se2[2070,2070,200-0,M], ens-cache9.se2[2071,0]
Age: 29476
X-Cache: MISS TCP_MISS dirn:11:455657740
X-Swift-SaveTime: Fri, 26 Apr 2024 04:30:52 GMT
X-Swift-CacheTime: 2562524
Timing-Allow-Origin: *
EagleId: 2ff62c9d17141058506905406e
|
|
| GET www.telegramns.com/favicon.ico |  0.0.0.0 | | 0 B |
URL GET www.telegramns.com/favicon.ico IP0.0.0.0:0
Requested byhttp://www.telegramns.com/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Telegram | | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: www.telegramns.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://www.telegramns.com/
Cookie: _gcl_au=1.1.1169331037.1714105851
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|