Report - fluxxxtele.pages.dev/

Report Overview

Submitted URL
fluxxxtele.pages.dev/
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-16 16:42:51
Access
public
Website Title
OFFICIAL TELEGRAM DATING
Final URL
fluxxxtele.pages.dev/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
10

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fluxxxtele.pages.dev	unknown	unknown	No data	No data	2.3 kB	235 kB	188.114.97.1
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2024-04-16	1.0 kB	115 kB	151.101.129.229
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-16	1.1 kB	33 kB	142.250.74.131
telegram.org	5408	2003-12-15	2013-12-18	2024-04-15	1.7 kB	286 kB	149.154.167.99
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-16	441 B	5.0 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	fluxxxtele.pages.dev/	Telegram
2024-04-16	medium	fluxxxtele.pages.dev/	Telegram
2024-04-16	medium	fluxxxtele.pages.dev/	Telegram
2024-04-16	medium	fluxxxtele.pages.dev/	Telegram
2024-04-16	medium	fluxxxtele.pages.dev/	Telegram

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	fluxxxtele.pages.dev/	49 kB	2023-03-26	2024-04-26
Pretty URL fluxxxtele.pages.dev/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-26 13:28:27 Last Seen2024-04-26 20:05:01 Times Seen293 Hash b3faf04bf3767cf03cc0f50c9455a5ba 3acf0d708895b4e0b8c17de931df887e385a3fad 1080e3c7d142dd740e8e1a0522fdedb67060a2ff398b888800aa9a3535144e21 Loading...

	fluxxxtele.pages.dev/js/js-tgwallpaper.min.js	3.0 kB	2023-03-07	2024-04-29
Pretty URL fluxxxtele.pages.dev/js/js-tgwallpaper.min.js IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:31:07 Last Seen2024-04-29 23:11:24 Times Seen5137 Hash 2b89d34702716a8ad2cc3977718f53a3 04406ebd6a9e2ce79dbac5e5048cfe1384e4574a 2031e418ee10af8110729b3f327b968462fc0a9d8d1da095387bb472ccd0dee6 Loading...

	unknown	801 B	2023-05-19	2024-04-26
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-19 22:13:12 Last Seen2024-04-26 20:05:01 Times Seen291 Hash 020892a487aaca13e146ae8a43fea1ca 5a7e88e2db39789230c26f7e02f01f3c0adeb103 0ba14afb810a42146462c72f7518360ce01f0d44117301804b65d20239899d44 Loading...

	unknown	182 B	2023-05-19	2024-04-26
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-19 22:13:12 Last Seen2024-04-26 20:05:01 Times Seen291 Hash dcea26e0f46285294e1b18b730dfade6 0425d3026d3a84be4dbb8cf9b4eaba7692c78220 04636c631ccf73ed8d7d14a24240e3a2d087375265b691346f5f1fb3ec5a52df Loading...

	fluxxxtele.pages.dev/	6.4 kB	2023-03-26	2024-04-26
Pretty URL fluxxxtele.pages.dev/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-26 13:28:27 Last Seen2024-04-26 20:05:01 Times Seen293 Hash 8628fa9307ec0534c7687fc4acd35282 be13256835ccfb5cdb39e1457612fd84249114a4 8691caec700cc630fddae779756d41752a87b91fb718843cdafc874e2c818653 Loading...

	unknown	210 B	2023-05-19	2024-04-26
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-19 22:13:12 Last Seen2024-04-26 20:05:01 Times Seen301 Hash 8d2dea8cafc6e9b8e511b72b7d261e5d 18618b4a2c5555143e45a3b7b57a19807e27e408 cc28e0b542cd9fad828f4bd79ab4f7c7f8a8fd5d0f57859aefd35bcdcc3b05da Loading...

	fluxxxtele.pages.dev/	10 kB	2023-03-26	2024-04-26
Pretty URL fluxxxtele.pages.dev/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-26 13:28:27 Last Seen2024-04-26 20:05:01 Times Seen292 Hash c037769056a438fe436abc4fdcd25445 2df5294421dd8f48f1c99a561bca8adb00a88b82 c2c98c86a7a588167f0733f067b55b2ced40caa580541d2d631226ddab5899aa Loading...

		Size	First Seen	Last Seen
	#1 Write - 870b9c1dc6da77622094aea99fc55b95	5.8 kB	2023-03-26	2024-04-26
Pretty Observations First Seen2023-03-26 13:28:27 Last Seen2024-04-26 20:05:01 Times Seen293 Hash 870b9c1dc6da77622094aea99fc55b95 0b421ce3364673a4340a28219a5c7769993522c2 8f5c3bc5f59d8f69f3f9fe21ec4ee8b4e83b0beedb1bccdb419c9ada3d01aedb Loading...

	#2 Write - 223585156fa94aa8b3e4fbdc0ead67b8	640 B	2023-03-26	2024-04-26
Pretty Observations First Seen2023-03-26 13:28:27 Last Seen2024-04-26 20:05:01 Times Seen293 Hash 223585156fa94aa8b3e4fbdc0ead67b8 5f069deafb128a9f33b5973d9280efdb0ff55cb2 4495263d32ba9c51fa72214d46d5a8a15720c7e26f4372fe0b9800a8dfc859d6 Loading...

	#3 Write - ef88b625fd81d21ed8a1cb7eea5f7975	1.1 kB	2023-03-26	2024-04-26
Pretty Observations First Seen2023-03-26 13:28:27 Last Seen2024-04-26 20:05:01 Times Seen293 Hash ef88b625fd81d21ed8a1cb7eea5f7975 8e2b36f6f515fc621fc6c0e74f1445b43db9c88e 651d07466b74cec626d880079b6aa9b74da314e2b4ce6043a6f5f3119de2c425 Loading...

HTTP Transactions (14)

URL IP Response Size

fluxxxtele.pages.dev/images/img-profile-1.jpg

188.114.97.1

200 OK

156 kB

URL GET HTTP/3
fluxxxtele.pages.dev/images/img-profile-1.jpg
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fluxxxtele.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectfluxxxtele.pages.dev
FingerprintB4:C7:18:E9:DF:57:2F:56:4F:90:1A:66:A8:75:BD:1F:38:90:2D:39
ValidityThu, 14 Mar 2024 14:44:37 GMT - Wed, 12 Jun 2024 14:44:36 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1080x1071, components 3
Size
156 kB (156077 bytes)
Hash
1e4e8bf38a736ddbf3b37f725c2c6996
8665bb1f3713fa53ed4f049847781ee46cc02e39
eb1afa33de03f6734510282fbe8cf0c0dbab3c91fccbfa379c50681d419adb65

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /images/img-profile-1.jpg HTTP/1.1
Host: fluxxxtele.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fluxxxtele.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 16:42:26 GMT
content-type: image/jpeg
content-length: 156077
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "398570c34aafa08182d3cd0963670b22"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0gMQ%2FOqXjBdLujdqnnhVborQMY1XeaHef%2F8GojaJ3DA5B5uvjLHgS%2F1PpJh9wZvlwkGQLFa6xlbMA14pjjMHNNfCe%2FG2YJwMl6pXtadcJiVculCKjsrKdWBNUZCP2tfdojfqDxwV8Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755a0e93cf556c6-OSL
alt-svc: h3=":443"; ma=86400

cdn.jsdelivr.net/npm/bootstrap-icons@1.8.1/font/bootstrap-icons.css

151.101.129.229

200 OK

11 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap-icons@1.8.1/font/bootstrap-icons.css
IP
151.101.129.229:443
ASN
#54113 FASTLY

Requested by
https://fluxxxtele.pages.dev/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
ASCII text
Size
11 kB (10883 bytes)
Hash
79877fb82de8ca50845081e3c9a201c5
4f6ea69c0e03431ffa1a097a45453b5b3b246d8b
af35cc6aba34e5005de77099dfa72d4c1a7715d28ddcec343f48031dc8cb08bc

HTTP Headers

GET /npm/bootstrap-icons@1.8.1/font/bootstrap-icons.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fluxxxtele.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 1.8.1
x-jsd-version-type: version
etag: W/"13a7e-T26mnA4DQx/6Ggl6RUU7WzskbYs"
content-encoding: br
accept-ranges: bytes
date: Tue, 16 Apr 2024 16:42:26 GMT
age: 173509
x-served-by: cache-fra-etou8220090-FRA, cache-hel1410023-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10883
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap-icons@1.8.1/font/fonts/bootstrap-icons.woff2?524846017b983fc8ded9325d94ed40f3

151.101.129.229

200 OK

102 kB

URL GET HTTP/3
cdn.jsdelivr.net/npm/bootstrap-icons@1.8.1/font/fonts/bootstrap-icons.woff2?524846017b983fc8ded9325d94ed40f3
IP
151.101.129.229:443
ASN
#54113 FASTLY

Requested by
https://fluxxxtele.pages.dev/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
Web Open Font Format (Version 2), TrueType, length 102536, version 1.0
Size
102 kB (102536 bytes)
Hash
1ed478a6b265d4b4f5c26bb063203588
1ca5e8c7d2fb8e9d60ad1a1feb2a46e98c248a3d
c874e14c63db86c4c5318c77cb557fce7036645edc7d690dcc1d23b389631b13

HTTP Headers

GET /npm/bootstrap-icons@1.8.1/font/fonts/bootstrap-icons.woff2?524846017b983fc8ded9325d94ed40f3 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fluxxxtele.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://cdn.jsdelivr.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 102536
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: font/woff2
x-jsd-version: 1.8.1
x-jsd-version-type: version
etag: W/"19088-HKXox9L7jp1grRof6ypG6Ywkij0"
accept-ranges: bytes
date: Tue, 16 Apr 2024 16:42:26 GMT
age: 3587845
x-served-by: cache-fra-eddf8230061-FRA, cache-hel1410028-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

142.250.74.131

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://fluxxxtele.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fluxxxtele.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 02:37:01 GMT
expires: Fri, 11 Apr 2025 02:37:01 GMT
cache-control: public, max-age=31536000
age: 482725
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

142.250.74.131

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
142.250.74.131:443
ASN
#15169 GOOGLE

Requested by
https://fluxxxtele.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://fluxxxtele.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 10:46:32 GMT
expires: Wed, 16 Apr 2025 10:46:32 GMT
cache-control: public, max-age=31536000
age: 21354
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fluxxxtele.pages.dev/favicons/img-apple-touch-icon.png

188.114.97.1

200 OK

5.6 kB

URL GET HTTP/3
fluxxxtele.pages.dev/favicons/img-apple-touch-icon.png
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fluxxxtele.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectfluxxxtele.pages.dev
FingerprintB4:C7:18:E9:DF:57:2F:56:4F:90:1A:66:A8:75:BD:1F:38:90:2D:39
ValidityThu, 14 Mar 2024 14:44:37 GMT - Wed, 12 Jun 2024 14:44:36 GMT

File type
PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced
Size
5.6 kB (5644 bytes)
Hash
295ccdb03006b8dfef45090dafbd46ac
491ab660270e47cbac6a5731c51cca71c1c1b2b1
a51d667d4262047c23e3a2a8aac3b46dc8a58c686cc013f2354011c07bf22cf3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /favicons/img-apple-touch-icon.png HTTP/1.1
Host: fluxxxtele.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fluxxxtele.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 16 Apr 2024 16:42:27 GMT
content-type: image/png
content-length: 5644
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ae3c0d8713d4766151fe129f98df6f8b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LrPpi8Q2maZecCNe2Og%2Bz9MNK1q0AKLtRAPRpIt3wfe2GgJ%2BsH7zGnjhbAJO0cDdXhHKVISng%2FV2m%2BqixLq9TOyI2kl0nBV8ChI5xPuJJJ01rXG7AHMmZeFAndKT2OTGhG3D7u5xLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755a0ed2ca056c6-OSL
alt-svc: h3=":443"; ma=86400

telegram.org/css/bootstrap.min.css?3

149.154.167.99

200 OK

11 kB

URL GET HTTP/2
telegram.org/css/bootstrap.min.css?3
IP
149.154.167.99:443
ASN
#62041 Telegram Messenger Inc

Requested by
https://fluxxxtele.pages.dev/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT

File type
gzip compressed data, max speed, from Unix
Size
11 kB (10637 bytes)
Hash
23680eb1af90a295f4b7833ae36aa616
c6b4bef2db91882ba08f76046bd96b5a3eafc997
ee59fed740802521501dc316f9be159fb48a3c2f4f192ff00a14d91865bdd6c7

HTTP Headers

GET /css/bootstrap.min.css?3 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fluxxxtele.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 16 Apr 2024 16:42:26 GMT
content-type: text/css
last-modified: Fri, 10 Nov 2017 17:54:14 GMT
etag: W/"5a05e7c6-a61b"
expires: Sat, 20 Apr 2024 16:42:26 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2

telegram.org/css/telegram.css?227

149.154.167.99

200 OK

41 kB

URL GET HTTP/2
telegram.org/css/telegram.css?227
IP
149.154.167.99:443
ASN
#62041 Telegram Messenger Inc

Requested by
https://fluxxxtele.pages.dev/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT

File type
gzip compressed data, max speed, from Unix
Size
41 kB (40750 bytes)
Hash
db83f2af3873da8f8245e685eded9dc8
55a42ba6b1500c0cf8fead3288c9265b1218f476
517170898a269ac76b876e2beaa47b360205343705895fea22eb71a4ed562045

HTTP Headers

GET /css/telegram.css?227 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fluxxxtele.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 16 Apr 2024 16:42:26 GMT
content-type: text/css
last-modified: Mon, 20 Mar 2023 10:58:55 GMT
etag: W/"64183c6f-1c0b3"
expires: Sat, 20 Apr 2024 16:42:26 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2

fluxxxtele.pages.dev/

188.114.97.1

200 OK

66 kB

URL User Request GET HTTP/2
fluxxxtele.pages.dev/
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectfluxxxtele.pages.dev
FingerprintB4:C7:18:E9:DF:57:2F:56:4F:90:1A:66:A8:75:BD:1F:38:90:2D:39
ValidityThu, 14 Mar 2024 14:44:37 GMT - Wed, 12 Jun 2024 14:44:36 GMT

File type
HTML document, ASCII text, with very long lines (48798)
Size
66 kB (66427 bytes)
Hash
c1d6e39393e439c3bb9f0a7afc191892
7cd8dd2e6c892a2d02d420c8e6269be03f694f30
dbbc1b5e235ff394d777f1e791604e37aeef476e506417c9b32195bab602059a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET / HTTP/1.1
Host: fluxxxtele.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 16 Apr 2024 16:42:25 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"54c7ca34cec849a00a72a7c1ae3369d3"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B8RAsHiH%2BrL%2BBHEpvM6DFTLaruTPFi%2BJwIe%2FcxLJAFSocyov7BsRQab1oTFdVTQ1vpmiKd9W7OXHRaCRn%2BzSH5CcUj10haGEF5LQcg4v9Wh4El9XPhnvoJUh0vEIBahp5XZszDvWOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755a0e79920b503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

telegram.org/img/tgme/pattern.svg?1

149.154.167.99

200 OK

232 kB

URL GET HTTP/2
telegram.org/img/tgme/pattern.svg?1
IP
149.154.167.99:443
ASN
#62041 Telegram Messenger Inc

Requested by
https://fluxxxtele.pages.dev/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT

File type
SVG Scalable Vector Graphics image
Size
232 kB (231706 bytes)
Hash
d0c22c6a97023d85ba6e644a41c44a5d
4284efb616c182da4450c123174ce0e81a322845
118add53487c02aaf5b5ab9f69380fa06717deb10492e14aaa487e3c62806ad4

HTTP Headers

GET /img/tgme/pattern.svg?1 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/css/telegram.css?227
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 16 Apr 2024 16:42:26 GMT
content-type: image/svg+xml
last-modified: Thu, 05 Jan 2023 17:52:04 GMT
etag: W/"63b70e44-3891a"
expires: Sat, 20 Apr 2024 16:42:26 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2

fluxxxtele.pages.dev/css/style.css

188.114.97.1

200 OK

337 B

URL GET HTTP/3
fluxxxtele.pages.dev/css/style.css
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fluxxxtele.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectfluxxxtele.pages.dev
FingerprintB4:C7:18:E9:DF:57:2F:56:4F:90:1A:66:A8:75:BD:1F:38:90:2D:39
ValidityThu, 14 Mar 2024 14:44:37 GMT - Wed, 12 Jun 2024 14:44:36 GMT

File type
ASCII text, with very long lines (361), with no line terminators
Size
337 B (337 bytes)
Hash
25d3f60956c3a1c8779b3c6d57c8e4c2
bb9fab488cb04f5f0a6e79c062c56ca651697809
6c681158e7e273c956564681a784ce66b5cfe1fb5d0567508b8ec3745e70b07d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /css/style.css HTTP/1.1
Host: fluxxxtele.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fluxxxtele.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 16:42:26 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"90f6d7cd3044dadc6d9b9f251b985245"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BV2rRlAj04s6m4og%2FZOylmvpE9%2FU8ZUF%2FnH3yYzQi797fexFztXGl1om2FfogZ%2BNcrbJ3tXBHpQK503lqsVXWBIh%2F77mL5ka0rr1UgV6KogPGHnkVDZG80HF4nDad2vPAT%2FWPLINCQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755a0e94d1856c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

telegram.org/img/website_icon.svg?4

149.154.167.99

200 OK

1.9 kB

URL GET HTTP/2
telegram.org/img/website_icon.svg?4
IP
149.154.167.99:443
ASN
#62041 Telegram Messenger Inc

Requested by
https://fluxxxtele.pages.dev/
Certificate
IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintAB:E8:E5:0A:DF:76:6C:98:C8:9F:D7:9C:26:CC:5E:B0:3D:AD:09:30
ValidityFri, 11 Aug 2023 16:00:43 GMT - Wed, 11 Sep 2024 16:00:43 GMT

File type
SVG Scalable Vector Graphics image
Size
1.9 kB (1896 bytes)
Hash
5caca7ae1cffb3da0b06150a15020005
04cfb934f238d33209406393a3fbf78454815739
1ea747a06fbc240c2594a8c523cb248bbda4784f0fcad9d0f06334f1a378604f

HTTP Headers

GET /img/website_icon.svg?4 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fluxxxtele.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 16 Apr 2024 16:42:26 GMT
content-type: image/svg+xml
last-modified: Mon, 20 Jul 2020 20:41:37 GMT
etag: W/"5f160181-768"
expires: Sat, 20 Apr 2024 16:42:26 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Roboto:400,700

142.250.74.106

200 OK

4.4 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto:400,700
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://fluxxxtele.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
ASCII text, with very long lines (4464), with no line terminators
Size
4.4 kB (4352 bytes)
Hash
663115e2d6c2b79a734763ca932e68ef
21a397fb4f8acc7394f1a09afb98ecbee44fb8c4
c9e395b80f3cd019065780e9132a980874cf8c9b29fc460d67cb132d7828db39

HTTP Headers

GET /css?family=Roboto:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fluxxxtele.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 16 Apr 2024 16:42:26 GMT
date: Tue, 16 Apr 2024 16:42:26 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fluxxxtele.pages.dev/js/js-tgwallpaper.min.js

188.114.97.1

200 OK

3.0 kB

URL GET HTTP/3
fluxxxtele.pages.dev/js/js-tgwallpaper.min.js
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://fluxxxtele.pages.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectfluxxxtele.pages.dev
FingerprintB4:C7:18:E9:DF:57:2F:56:4F:90:1A:66:A8:75:BD:1F:38:90:2D:39
ValidityThu, 14 Mar 2024 14:44:37 GMT - Wed, 12 Jun 2024 14:44:36 GMT

File type
ASCII text, with very long lines (2998), with no line terminators
Size
3.0 kB (2979 bytes)
Hash
f03422dc797fd26a3834b1ec041128ed
a6e88f4fe48b749c2b7360e8e004f64b6cfffb1a
046ec6b7909d0ca5cc6ef271a1b57b2f2be0bd88e3495fd8c496f1524e8ffaac

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /js/js-tgwallpaper.min.js HTTP/1.1
Host: fluxxxtele.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://fluxxxtele.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 16:42:26 GMT
content-type: text/javascript; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"d9ca483f58139363967b38c06deb324c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CDaozOm8ygNdv9awxy7m5yBz598w4Tu1PD8hzWqVDv6D6o6ZDLGQPlLvSSlSdIraUMbhN6SN46%2Bh9ycyAopQfyBlFnK15S7ZwYAhPPIhher%2BosC81v7txnD%2FS03WXAMCD0EiLbMW3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8755a0ec3ae556c6-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (14)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size