Report - www.telegram-aop.org/

Report Overview

Submitted URL
www.telegram-aop.org/
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-24 15:54:17
Access
public
Website Title
Telegram中文官网
Final URL
www.telegram-aop.org/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
38

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.telegram-aop.org	unknown	unknown	No data	No data	8.6 kB	3.0 MB	188.114.96.1
aus5.mozilla.org	2548	1998-01-24	2015-10-27	2024-04-23	512 B	1.2 kB	35.244.181.201

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	www.telegram-aop.org/	Telegram
2024-04-24	medium	www.telegram-aop.org/	Telegram
2024-04-24	medium	www.telegram-aop.org/	Telegram
2024-04-24	medium	www.telegram-aop.org/	Telegram
2024-04-24	medium	www.telegram-aop.org/	Telegram
2024-04-24	medium	www.telegram-aop.org/	Telegram
2024-04-24	medium	www.telegram-aop.org/	Telegram
2024-04-24	medium	www.telegram-aop.org/	Telegram
2024-04-24	medium	www.telegram-aop.org/	Telegram
2024-04-24	medium	www.telegram-aop.org/	Telegram
2024-04-24	medium	www.telegram-aop.org/	Telegram
2024-04-24	medium	www.telegram-aop.org/	Telegram
2024-04-24	medium	www.telegram-aop.org/	Telegram
2024-04-24	medium	www.telegram-aop.org/	Telegram
2024-04-24	medium	www.telegram-aop.org/	Telegram
2024-04-24	medium	www.telegram-aop.org/	Telegram
2024-04-24	medium	www.telegram-aop.org/	Telegram
2024-04-24	medium	www.telegram-aop.org/	Telegram
2024-04-24	medium	www.telegram-aop.org/	Telegram

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	www.telegram-aop.org/js/jquery-3.6.1.min.js	90 kB	2023-03-07	2024-05-06
Pretty URL www.telegram-aop.org/js/jquery-3.6.1.min.js IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:28:27 Last Seen2024-05-06 08:45:34 Times Seen23429 Hash 00727d1d5d9c90f7de826f1a4a9cc632 ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2 a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74 Loading...

	www.telegram-aop.org/	0 B	2023-03-07	2024-05-06
Pretty URL www.telegram-aop.org/ IP 188.114.96.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-06 11:31:23 Times Seen37376808 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (20)

URL IP Response Size

www.telegram-aop.org/picture/android_img.png

188.114.96.1

200 OK

28 kB

URL GET HTTP/3
www.telegram-aop.org/picture/android_img.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.telegram-aop.org/
Certificate
IssuerGoogle Trust Services LLC
Subjecttelegram-aop.org
FingerprintE8:F5:CC:C0:83:BE:96:A9:DC:95:55:DD:B0:21:5A:33:2B:89:1B:D4
ValidityWed, 24 Apr 2024 07:35:12 GMT - Tue, 23 Jul 2024 07:35:11 GMT

File type
PNG image data, 270 x 290, 8-bit/color RGBA, non-interlaced
Size
28 kB (28412 bytes)
Hash
24536e4c83c68fc9d5e780f1e7e56f14
8bdfd88119fbc35e53c05dd4869c6a1c4a20a06b
88b758c3a7977028b3ea07d83333c3fcc9f4ee2b35a3d968c24c761c1a95b5f2

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /picture/android_img.png HTTP/1.1
Host: www.telegram-aop.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.telegram-aop.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:53:53 GMT
content-type: image/png
content-length: 28412
last-modified: Fri, 04 Nov 2022 21:29:49 GMT
etag: "6365844d-6efc"
expires: Fri, 24 May 2024 15:53:53 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WYaMgWSsE1mLBHxbqKiPesencJ4MsJ8YHJuu3wCgHbFnbSRsAXq8gTKeGEtE6yVtI75hDhWRNGMBZcJGaPHtoob6xYtr56HLmk71Wh0B2NGTapLhHyBCo%2BsNLhzz4fYWidVwD4G0Ow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879744c8ccca568f-OSL
alt-svc: h3=":443"; ma=86400

www.telegram-aop.org/picture/android_img3.png

188.114.96.1

200 OK

82 kB

URL GET HTTP/3
www.telegram-aop.org/picture/android_img3.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.telegram-aop.org/
Certificate
IssuerGoogle Trust Services LLC
Subjecttelegram-aop.org
FingerprintE8:F5:CC:C0:83:BE:96:A9:DC:95:55:DD:B0:21:5A:33:2B:89:1B:D4
ValidityWed, 24 Apr 2024 07:35:12 GMT - Tue, 23 Jul 2024 07:35:11 GMT

File type
PNG image data, 540 x 580, 8-bit/color RGBA, non-interlaced
Size
82 kB (81615 bytes)
Hash
6a6b057310e32ef0194e89b60cd1aeba
cd7f54ab1c91d1130b213bb5c1433ed73fdb1cd5
ec944d0e2ab5e484ab13b9358782c66635f56d7f4b5606646930cff212bc73d5

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /picture/android_img3.png HTTP/1.1
Host: www.telegram-aop.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.telegram-aop.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:53:53 GMT
content-type: image/png
content-length: 81615
last-modified: Fri, 04 Nov 2022 21:29:50 GMT
etag: "6365844e-13ecf"
expires: Fri, 24 May 2024 15:53:53 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ER%2BXcSc9sxuzqJofAOypDN%2FYHmg%2B6zMAAXClQ%2Bw1djNE%2B5P1%2FobRBm%2F1RRxRox9c8j5xpjtO67%2Fl343GyW0P38aCk%2B5P1tHAfXete9ImdfipMusA%2FC6T9PEtRQivyFt5qPKd3g4ckg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879744c8cccc568f-OSL
alt-svc: h3=":443"; ma=86400

www.telegram-aop.org/picture/window_img.png

188.114.96.1

200 OK

38 kB

URL GET HTTP/3
www.telegram-aop.org/picture/window_img.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.telegram-aop.org/
Certificate
IssuerGoogle Trust Services LLC
Subjecttelegram-aop.org
FingerprintE8:F5:CC:C0:83:BE:96:A9:DC:95:55:DD:B0:21:5A:33:2B:89:1B:D4
ValidityWed, 24 Apr 2024 07:35:12 GMT - Tue, 23 Jul 2024 07:35:11 GMT

File type
PNG image data, 507 x 270, 8-bit/color RGB, non-interlaced
Size
38 kB (37607 bytes)
Hash
f1c5283a9169398cf1b31bdb0d5c223e
533e62405ab3887bf4e39de5e86635e667e114c4
431b4cb2c228f8ea5cad449b1f23d4fc43a10610842e976af764602b10c65f25

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /picture/window_img.png HTTP/1.1
Host: www.telegram-aop.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.telegram-aop.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:53:53 GMT
content-type: image/png
content-length: 37607
last-modified: Fri, 04 Nov 2022 21:30:17 GMT
etag: "63658469-92e7"
expires: Fri, 24 May 2024 15:53:53 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WYgNtbLTQKzdfLWQAs27t6cFJLflTJ8%2FXbKHkd2mpyoMXVYxp%2BHJdW8ag81xrgX%2FrRZ60Tg71skiF%2FAx9B%2F5jXKn9x7wuCgvfFTowZaq9KDeetyRVGkelLygh%2BgyzQAHw3FTBmw78A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879744c8ccc7568f-OSL
alt-svc: h3=":443"; ma=86400

www.telegram-aop.org/picture/iphone_img.png

188.114.96.1

200 OK

59 kB

URL GET HTTP/3
www.telegram-aop.org/picture/iphone_img.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.telegram-aop.org/
Certificate
IssuerGoogle Trust Services LLC
Subjecttelegram-aop.org
FingerprintE8:F5:CC:C0:83:BE:96:A9:DC:95:55:DD:B0:21:5A:33:2B:89:1B:D4
ValidityWed, 24 Apr 2024 07:35:12 GMT - Tue, 23 Jul 2024 07:35:11 GMT

File type
PNG image data, 442 x 290, 8-bit/color RGBA, non-interlaced
Size
59 kB (59342 bytes)
Hash
3e360c636681f702dca95e684b3bd892
5fec0d6485b89e26a9b0f60fc37644eb820570dd
b131411e4350b60033ad8611473b27d823609b58e52d5ad3407cc2e0a63fb430

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /picture/iphone_img.png HTTP/1.1
Host: www.telegram-aop.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.telegram-aop.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:53:53 GMT
content-type: image/png
content-length: 59342
last-modified: Fri, 04 Nov 2022 21:29:51 GMT
etag: "6365844f-e7ce"
expires: Fri, 24 May 2024 15:53:53 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z6sjwtg54gt9lhRFi2MV0w17Gaq0a5jnw6U8KxgRvgdKQRbjY1DozdwwAanNJr6EHfvxeGqlM6IHT1QGnfmjJUrfUE%2BtE8JsFC0lDIFX1PuRCxLlNNjL2NIZZlb6zxJkl3deEKVhyw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879744c8cccd568f-OSL
alt-svc: h3=":443"; ma=86400

www.telegram-aop.org/images/t_log.png

188.114.96.1

200 OK

42 kB

URL GET HTTP/3
www.telegram-aop.org/images/t_log.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.telegram-aop.org/
Certificate
IssuerGoogle Trust Services LLC
Subjecttelegram-aop.org
FingerprintE8:F5:CC:C0:83:BE:96:A9:DC:95:55:DD:B0:21:5A:33:2B:89:1B:D4
ValidityWed, 24 Apr 2024 07:35:12 GMT - Tue, 23 Jul 2024 07:35:11 GMT

File type
PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced
Size
42 kB (41729 bytes)
Hash
14f5022c4e73dc0d85937b5aa8f557a1
5f87b4fc475305b82b1d55a2c3c7b0999971a65c
857a9e5a12d1efd37ae456a2d3d6dfa08a76c121d58700211a86696329d6acf3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /images/t_log.png HTTP/1.1
Host: www.telegram-aop.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.telegram-aop.org/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:53:55 GMT
content-type: image/png
content-length: 41729
last-modified: Fri, 04 Nov 2022 21:30:19 GMT
etag: "6365846b-a301"
expires: Fri, 24 May 2024 15:53:54 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hP4m1FqLagJLLxQ0xI00D6nwhoOQ10HS7zjkSvcvl2C24Lso3xfdR7KNnfpUAvwpcpvZb0cx%2FGk64b4WinXcm8EY9ImJvxqAsTQhRXrcuPd6zHANYvp42XwL%2B8E2HRL9EgXF3SNMOw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879744cf4b8b568f-OSL
alt-svc: h3=":443"; ma=86400

www.telegram-aop.org/images/t_log.png

188.114.96.1

200 OK

42 kB

URL GET HTTP/3
www.telegram-aop.org/images/t_log.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.telegram-aop.org/
Certificate
IssuerGoogle Trust Services LLC
Subjecttelegram-aop.org
FingerprintE8:F5:CC:C0:83:BE:96:A9:DC:95:55:DD:B0:21:5A:33:2B:89:1B:D4
ValidityWed, 24 Apr 2024 07:35:12 GMT - Tue, 23 Jul 2024 07:35:11 GMT

File type
PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced
Size
42 kB (41729 bytes)
Hash
14f5022c4e73dc0d85937b5aa8f557a1
5f87b4fc475305b82b1d55a2c3c7b0999971a65c
857a9e5a12d1efd37ae456a2d3d6dfa08a76c121d58700211a86696329d6acf3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /images/t_log.png HTTP/1.1
Host: www.telegram-aop.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.telegram-aop.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:53:56 GMT
content-type: image/png
content-length: 41729
last-modified: Fri, 04 Nov 2022 21:30:19 GMT
etag: "6365846b-a301"
expires: Fri, 24 May 2024 15:53:54 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: HIT
age: 2
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a9gmzv255pSy63gt7ckt%2BIMzYEneBgtk478pENCpX4pCHWFZWaPXWFxS9Ym4pQmXPNjhX6qb0jTZ0%2FrKZLJ5UqZM0S%2BSvAyDLYla%2FKWoS81POtxKpfHIl0%2B3rg5RPop7Lt6r8fJElQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879744dd1b2b568f-OSL
alt-svc: h3=":443"; ma=86400

www.telegram-aop.org/picture/iphone_img3.png

188.114.96.1

200 OK

202 kB

URL GET HTTP/3
www.telegram-aop.org/picture/iphone_img3.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.telegram-aop.org/
Certificate
IssuerGoogle Trust Services LLC
Subjecttelegram-aop.org
FingerprintE8:F5:CC:C0:83:BE:96:A9:DC:95:55:DD:B0:21:5A:33:2B:89:1B:D4
ValidityWed, 24 Apr 2024 07:35:12 GMT - Tue, 23 Jul 2024 07:35:11 GMT

File type
PNG image data, 884 x 580, 8-bit/color RGBA, non-interlaced
Size
202 kB (202058 bytes)
Hash
ce06304cdb5c0ac2f82139659c20dc5d
e0ebe506e155df39c4bf0f103be28c3d96c5a05c
23a3d3f6cad25b7740db63a3bc1da7683628923f20c0dcfb7e3fc59402a3f643

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /picture/iphone_img3.png HTTP/1.1
Host: www.telegram-aop.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.telegram-aop.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:53:53 GMT
content-type: image/png
content-length: 202058
last-modified: Fri, 04 Nov 2022 21:29:52 GMT
etag: "63658450-3154a"
expires: Fri, 24 May 2024 15:53:53 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QW3ZTp%2Bb1qYaXevy%2FKisgZMbLBhifG6bpNnu82HB6Gr1OsPPr1GFLG0avS0yeQ9KXkG7FXtat8oXON%2Fc%2FFNZiMq86RXXhdB1qmqo3%2Bv4M%2BhPXPo%2FeWDyfvJQW7C%2BE6nyrLmrpmU7%2Bw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879744c8cccf568f-OSL
alt-svc: h3=":443"; ma=86400

www.telegram-aop.org/picture/tl_card_fast.gif

188.114.96.1

200 OK

2.4 MB

URL GET HTTP/3
www.telegram-aop.org/picture/tl_card_fast.gif
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.telegram-aop.org/
Certificate
IssuerGoogle Trust Services LLC
Subjecttelegram-aop.org
FingerprintE8:F5:CC:C0:83:BE:96:A9:DC:95:55:DD:B0:21:5A:33:2B:89:1B:D4
ValidityWed, 24 Apr 2024 07:35:12 GMT - Tue, 23 Jul 2024 07:35:11 GMT

File type
GIF image data, version 89a, 512 x 512
Size
2.4 MB (2415534 bytes)
Hash
cbd2d6af702cab22fb23c7d159abc428
c0b6c9da2c8da897c00df0a6569d2fd2540dbc1f
58a9156f7cb557eb157598032fd67ade899a5a8b635455fbeb46c7bfa0f122e4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /picture/tl_card_fast.gif HTTP/1.1
Host: www.telegram-aop.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.telegram-aop.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:53:53 GMT
content-type: image/gif
content-length: 2415534
last-modified: Fri, 04 Nov 2022 21:29:59 GMT
etag: "63658457-24dbae"
expires: Fri, 24 May 2024 15:53:53 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rv0v%2FaeXh%2F2Nv111Oxwpa8j3mknGOTn2lFSE9lG4%2BQfrn5Vhhi527E6O%2BaE4JtKDbuvPA9Sfd4bEYY95S1Fg%2F94EcdC4ndvkcbomLcM8XGb%2B3NAk%2FSSpAJf5IqU5t5L0I%2BVeg0bq2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879744c8dcd1568f-OSL
alt-svc: h3=":443"; ma=86400

www.telegram-aop.org/js/jquery-3.6.1.min.js

188.114.96.1

200 OK

36 kB

URL GET HTTP/3
www.telegram-aop.org/js/jquery-3.6.1.min.js
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.telegram-aop.org/
Certificate
IssuerGoogle Trust Services LLC
Subjecttelegram-aop.org
FingerprintE8:F5:CC:C0:83:BE:96:A9:DC:95:55:DD:B0:21:5A:33:2B:89:1B:D4
ValidityWed, 24 Apr 2024 07:35:12 GMT - Tue, 23 Jul 2024 07:35:11 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
36 kB (36068 bytes)
Hash
00727d1d5d9c90f7de826f1a4a9cc632
ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2
a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /js/jquery-3.6.1.min.js HTTP/1.1
Host: www.telegram-aop.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.telegram-aop.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:53:53 GMT
content-type: application/javascript
last-modified: Fri, 04 Nov 2022 21:30:18 GMT
vary: Accept-Encoding
etag: W/"6365846a-15e40"
expires: Thu, 25 Apr 2024 03:53:53 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TOySUki76BVxHhRwXQ9Szv7G0oDhwhG15DB2uOOs2s1aYoYKPq5WiS%2BhKPQwYHMB%2F26G5ZHSjDOoT5sZoxCAjUOmEQhzuIMscisIzw9vMfcyYbh9xA1rquDkCdTH5TwUoV2FgdCfRQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879744c8ccc4568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml

35.244.181.201

444 B

URL
aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
IP
35.244.181.201:0
ASN
#396982 GOOGLE-CLOUD-PLATFORM

File type
XML 1.0 document, ASCII text, with very long lines (332)
Size
444 B (444 bytes)
Hash
3b324dec137a87ef7e24a30a65b13dd0
c0faa95b2f1018e264b3a14aaf50d1003e6c27b3
6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463

HTTP Headers

GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=pGcE5-a8KieyNKjBCZ2N7CfEop6sFx7Rqw_jtHZCjwX5N-7dJd0muLpHYonRVMwfCputH_Dfy6tekSd3su9kcvdwhlOVoVvUmCGaMJOWuxoDIjBu9Vm8hIfd1M4YgicV
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Wed, 24 Apr 2024 15:53:28 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 42
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2

www.telegram-aop.org/picture/tl_card_cloud.gif

0.0.0.0

0 B

URL GET
www.telegram-aop.org/picture/tl_card_cloud.gif
IP
0.0.0.0:0
ASN
#0

Requested by
https://www.telegram-aop.org/
Certificate
IssuerGoogle Trust Services LLC
Subjecttelegram-aop.org
FingerprintE8:F5:CC:C0:83:BE:96:A9:DC:95:55:DD:B0:21:5A:33:2B:89:1B:D4
ValidityWed, 24 Apr 2024 07:35:12 GMT - Tue, 23 Jul 2024 07:35:11 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /picture/tl_card_cloud.gif HTTP/1.1
Host: www.telegram-aop.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.telegram-aop.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:53:53 GMT
content-type: image/gif
content-length: 3422486
last-modified: Fri, 04 Nov 2022 21:29:55 GMT
etag: "63658453-343916"
expires: Fri, 24 May 2024 15:53:53 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5bvudOVYdppNhJGQdGbPon4Ah8VmGK2Z1FoPMiS%2BnIQUrc%2BAyqW94Oab1DeLBcaTGRjUjoXnc%2BZ6bO5mJiLX2hrurcqrAZl%2BXP47WxDYahdwPW2aePm1W95hjKO%2FK8raCib3B7jU7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879744c8dcd8568f-OSL
alt-svc: h3=":443"; ma=86400

www.telegram-aop.org/css/style.css

188.114.96.1

200 OK

10 kB

URL GET HTTP/3
www.telegram-aop.org/css/style.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://www.telegram-aop.org/
Certificate
IssuerGoogle Trust Services LLC
Subjecttelegram-aop.org
FingerprintE8:F5:CC:C0:83:BE:96:A9:DC:95:55:DD:B0:21:5A:33:2B:89:1B:D4
ValidityWed, 24 Apr 2024 07:35:12 GMT - Tue, 23 Jul 2024 07:35:11 GMT

File type
ASCII text
Size
10 kB (10357 bytes)
Hash
758b5d93cd21e592ea91f96d20283a18
be8616a94013937eced87e4a895546333d0f9b94
b0b34100768d29c8d09bbf9c99216a9b709eff87865b88eec107be11b3b32737

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /css/style.css HTTP/1.1
Host: www.telegram-aop.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.telegram-aop.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:53:53 GMT
content-type: text/css
last-modified: Fri, 04 Nov 2022 21:30:20 GMT
vary: Accept-Encoding
etag: W/"6365846c-2875"
expires: Thu, 25 Apr 2024 03:53:53 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fa2za2TyC6vmFMSMPu5a0Qn9%2BQLCiucv%2FHvFOvHDcYBK4CtX1A7dljJ2MD1oLyMMSBe5PfI7zZ%2B%2B1eXbytjyF8BznYM%2FGSiAn70qR%2BbNavU%2BJgBuZ%2BFBDFYBfUHXisLrVATOsNs9%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879744c8ccc1568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.telegram-aop.org/picture/tl_card_free.gif

0.0.0.0

0 B

URL GET
www.telegram-aop.org/picture/tl_card_free.gif
IP
0.0.0.0:0
ASN
#0

Requested by
https://www.telegram-aop.org/
Certificate
IssuerGoogle Trust Services LLC
Subjecttelegram-aop.org
FingerprintE8:F5:CC:C0:83:BE:96:A9:DC:95:55:DD:B0:21:5A:33:2B:89:1B:D4
ValidityWed, 24 Apr 2024 07:35:12 GMT - Tue, 23 Jul 2024 07:35:11 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /picture/tl_card_free.gif HTTP/1.1
Host: www.telegram-aop.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.telegram-aop.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:53:53 GMT
content-type: image/gif
content-length: 2254846
last-modified: Fri, 04 Nov 2022 21:30:02 GMT
etag: "6365845a-2267fe"
expires: Fri, 24 May 2024 15:53:53 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oFD2Y%2FOuDHylOMHt22m8yCoW8cqyPlD1mNjVEdKG71HPP4eD54QmJIXujrrKFr3DVTl%2BGcnR%2FLDF%2B99BPCgD9loRU3IycJ8OyOnnoLG%2FAxyzozJR%2FQJ1egYODGtuPztrNXsdzIHc1A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879744c8dcd6568f-OSL
alt-svc: h3=":443"; ma=86400

www.telegram-aop.org/picture/tl_card_private.gif

0.0.0.0

0 B

URL GET
www.telegram-aop.org/picture/tl_card_private.gif
IP
0.0.0.0:0
ASN
#0

Requested by
https://www.telegram-aop.org/
Certificate
IssuerGoogle Trust Services LLC
Subjecttelegram-aop.org
FingerprintE8:F5:CC:C0:83:BE:96:A9:DC:95:55:DD:B0:21:5A:33:2B:89:1B:D4
ValidityWed, 24 Apr 2024 07:35:12 GMT - Tue, 23 Jul 2024 07:35:11 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /picture/tl_card_private.gif HTTP/1.1
Host: www.telegram-aop.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.telegram-aop.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:53:53 GMT
content-type: image/gif
content-length: 2202471
last-modified: Fri, 04 Nov 2022 21:30:09 GMT
etag: "63658461-219b67"
expires: Fri, 24 May 2024 15:53:53 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jJH4unX2iNI0DOrZr39bezSUrMws1QR11MS90OBHoYz7mx%2F8pCmVmO1wdw6QUPLvoWrB%2BVbvony0bzDRm%2Ft2aqZEhJv05i374XEyTuWA3fTbFnareciQ2N%2BT3lsfyEu7Xak3YMrZZQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879744c8dcd3568f-OSL
alt-svc: h3=":443"; ma=86400

www.telegram-aop.org/picture/tl_card_decentralized.gif

0.0.0.0

0 B

URL GET
www.telegram-aop.org/picture/tl_card_decentralized.gif
IP
0.0.0.0:0
ASN
#0

Requested by
https://www.telegram-aop.org/
Certificate
IssuerGoogle Trust Services LLC
Subjecttelegram-aop.org
FingerprintE8:F5:CC:C0:83:BE:96:A9:DC:95:55:DD:B0:21:5A:33:2B:89:1B:D4
ValidityWed, 24 Apr 2024 07:35:12 GMT - Tue, 23 Jul 2024 07:35:11 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /picture/tl_card_decentralized.gif HTTP/1.1
Host: www.telegram-aop.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.telegram-aop.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:53:54 GMT
content-type: image/gif
content-length: 2700330
last-modified: Fri, 04 Nov 2022 21:29:57 GMT
etag: "63658455-29342a"
expires: Fri, 24 May 2024 15:53:53 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZQ%2B7wZINw9AqNvWjxIdD35QKEn47o4EqsvMqnfaPuArDGoRDtP5%2FMTRYx7sn2VNTwkclQC%2BkPs0BsCpXWlbzhGcZUYuEPjaHMeoMx8RLhedvkJBzSz01SaT4sXZHOT0r2hFkOP6%2Bng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879744c8dce1568f-OSL
alt-svc: h3=":443"; ma=86400

www.telegram-aop.org/picture/tl_card_open.gif

0.0.0.0

0 B

URL GET
www.telegram-aop.org/picture/tl_card_open.gif
IP
0.0.0.0:0
ASN
#0

Requested by
https://www.telegram-aop.org/
Certificate
IssuerGoogle Trust Services LLC
Subjecttelegram-aop.org
FingerprintE8:F5:CC:C0:83:BE:96:A9:DC:95:55:DD:B0:21:5A:33:2B:89:1B:D4
ValidityWed, 24 Apr 2024 07:35:12 GMT - Tue, 23 Jul 2024 07:35:11 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /picture/tl_card_open.gif HTTP/1.1
Host: www.telegram-aop.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.telegram-aop.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:53:53 GMT
content-type: image/gif
content-length: 2424803
last-modified: Fri, 04 Nov 2022 21:30:04 GMT
etag: "6365845c-24ffe3"
expires: Fri, 24 May 2024 15:53:53 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VO6Yvlli3bEOtxwz0a3SCjec2Jd9vdWlp5Jf8mnoiUWRxGTjKyuTt5aXWp4kDMnUNUGPuLHPTN6s1qYLw%2FCTSzw6DQ27Nq5mKnGkqK9jSRejlaCpPW%2BJa9RaM2Pp8HrcFdwfKmZqLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879744c8dcdb568f-OSL
alt-svc: h3=":443"; ma=86400

www.telegram-aop.org/picture/tl_card_secure.gif

0.0.0.0

0 B

URL GET
www.telegram-aop.org/picture/tl_card_secure.gif
IP
0.0.0.0:0
ASN
#0

Requested by
https://www.telegram-aop.org/
Certificate
IssuerGoogle Trust Services LLC
Subjecttelegram-aop.org
FingerprintE8:F5:CC:C0:83:BE:96:A9:DC:95:55:DD:B0:21:5A:33:2B:89:1B:D4
ValidityWed, 24 Apr 2024 07:35:12 GMT - Tue, 23 Jul 2024 07:35:11 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /picture/tl_card_secure.gif HTTP/1.1
Host: www.telegram-aop.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.telegram-aop.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:53:53 GMT
content-type: image/gif
content-length: 3327196
last-modified: Fri, 04 Nov 2022 21:30:13 GMT
etag: "63658465-32c4dc"
expires: Fri, 24 May 2024 15:53:53 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O%2BmpdWydr5W9xjQ5IxpfIp%2Fr5fELpsPulbeiSj5miqHQjrE4kDR4baxJdjUGi2%2FFXeJYxJvzBwVsHiqrrroHe67VAkt6YUvaTW2wuFSr6tVjudEaRAnNB17HndIk6%2BDixeW7ZH8QOA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879744c8dcde568f-OSL
alt-svc: h3=":443"; ma=86400

www.telegram-aop.org/

188.114.96.1

200 OK

10 kB

URL User Request GET HTTP/2
www.telegram-aop.org/
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjecttelegram-aop.org
FingerprintE8:F5:CC:C0:83:BE:96:A9:DC:95:55:DD:B0:21:5A:33:2B:89:1B:D4
ValidityWed, 24 Apr 2024 07:35:12 GMT - Tue, 23 Jul 2024 07:35:11 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (10292), with no line terminators
Size
10 kB (10440 bytes)
Hash
d3564e9ad8ef00ecbdb28e554e17c4bf
e3f58cc4398f3bb0e475879138c4ebf6718b04d3
0d65d9d8f89b4df278a2f6fff491703d3da422e03a9e2bd50453841eba39fbf3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET / HTTP/1.1
Host: www.telegram-aop.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 15:53:52 GMT
content-type: text/html
last-modified: Wed, 24 Apr 2024 12:20:09 GMT
vary: Accept-Encoding
strict-transport-security: max-age=31536000
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kH9L3TYDZd6MqqV55vi0j3vhS1BNcAl9agepJGm8KrXzlN0Rjo0%2BIN0lpMhrwSfPOO%2BCKn4nmPoyyem6vAkbTiVx7zmpWgcABCPMZlGj5KSY7yR%2FWi29UjSCQpAEypuTlgqmVxstmA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879744c27b1656ae-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

www.telegram-aop.org/picture/tl_card_powerful.gif

0.0.0.0

0 B

URL GET
www.telegram-aop.org/picture/tl_card_powerful.gif
IP
0.0.0.0:0
ASN
#0

Requested by
https://www.telegram-aop.org/
Certificate
IssuerGoogle Trust Services LLC
Subjecttelegram-aop.org
FingerprintE8:F5:CC:C0:83:BE:96:A9:DC:95:55:DD:B0:21:5A:33:2B:89:1B:D4
ValidityWed, 24 Apr 2024 07:35:12 GMT - Tue, 23 Jul 2024 07:35:11 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /picture/tl_card_powerful.gif HTTP/1.1
Host: www.telegram-aop.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.telegram-aop.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:53:53 GMT
content-type: image/gif
content-length: 2002471
last-modified: Fri, 04 Nov 2022 21:30:06 GMT
etag: "6365845e-1e8e27"
expires: Fri, 24 May 2024 15:53:53 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x8BW%2F6HUiVLP048RfgQb4QiIkDY3nlcNBFhbrZSDur3%2BMExnfa2nyFQ8a18jwFccSWZVTHeBdr9EurI9dJ20SpmJU2lVWLl1X9pkpqACfHZ9L3l3VI8vqpIPS06BrLV9n718acom%2BA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879744c8dcda568f-OSL
alt-svc: h3=":443"; ma=86400

www.telegram-aop.org/picture/tl_card_wecandoit.gif

0.0.0.0

0 B

URL GET
www.telegram-aop.org/picture/tl_card_wecandoit.gif
IP
0.0.0.0:0
ASN
#0

Requested by
https://www.telegram-aop.org/
Certificate
IssuerGoogle Trust Services LLC
Subjecttelegram-aop.org
FingerprintE8:F5:CC:C0:83:BE:96:A9:DC:95:55:DD:B0:21:5A:33:2B:89:1B:D4
ValidityWed, 24 Apr 2024 07:35:12 GMT - Tue, 23 Jul 2024 07:35:11 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /picture/tl_card_wecandoit.gif HTTP/1.1
Host: www.telegram-aop.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.telegram-aop.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 24 Apr 2024 15:53:53 GMT
content-type: image/gif
content-length: 3145277
last-modified: Fri, 04 Nov 2022 21:30:16 GMT
etag: "63658468-2ffe3d"
expires: Fri, 24 May 2024 15:53:53 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6ddjxgQKdYaCqJspT6WwNtUQfosCTKlXjAgwDE%2FloetXFum%2Fcj%2FUyWyLRtksnVMlwrcM6JvBdcA8bt5WUifgO2rlKnpsGKNmvgLD8JGDQv0IrxTOABhuTlW376U5EUwtPqJZRBjkKg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879744c8dce7568f-OSL
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (20)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections