Report - telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium

Report Overview

Visited public
2024-10-18 12:12:49
Tags
URL
telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium
Finishing URL
telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium
IP / ASN
172.66.46.217
#13335 CLOUDFLARENET
Title
OFFICIAL TELEGRAM DATING

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
telegramgirlshorny.pages.dev	unknown	2020-09-02	2024-10-18	2024-10-18	1.6 kB	21 kB	172.66.46.217
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-10-16	449 B	5.2 kB	142.250.74.106
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2024-10-16	1.1 kB	114 kB	151.101.65.229
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-10-16	1.1 kB	39 kB	216.58.207.227
telegram.org	5408	2003-12-15	2013-12-18	2024-10-16	2.7 kB	413 kB	149.154.167.99

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-10-17	medium	telegramgirlshorny.pages.dev/	Telegram
2024-10-17	medium	telegramgirlshorny.pages.dev/	Telegram
2024-10-17	medium	telegramgirlshorny.pages.dev/	Telegram

PhishTank

No alerts detected

Mnemonic Secure DNS

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium	ScriptElement	201 B	2023-03-26	2025-05-07
Pretty URL telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium IP 172.66.46.217 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-26 13:28 Last Seen2025-05-07 22:30 Times Seen1712 Hash d2f554bca2d55319522f74f53737856a 259e4b393d286e5dc6bd7bd7b0c1cedb9f3f8300 65304f9451b75c3e64f9c11cd89ca24cf1f54562c4d5374b929ab46dd8ab2ec5 Loading...

	telegram.org/js/tgwallpaper.min.js?3	ScriptElement	3.0 kB	2023-03-07	2025-05-09
Pretty URL telegram.org/js/tgwallpaper.min.js?3 IP 149.154.167.99 ASN #62041 Telegram Messenger Inc Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:31 Last Seen2025-05-09 03:37 Times Seen49065 Hash 2b89d34702716a8ad2cc3977718f53a3 04406ebd6a9e2ce79dbac5e5048cfe1384e4574a 2031e418ee10af8110729b3f327b968462fc0a9d8d1da095387bb472ccd0dee6 Loading...

	telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium	ScriptElement	0 B	0001-01-01	2025-05-09
Pretty URL telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium IP 172.66.46.217 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-09 03:45 Times Seen4633695 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (14)

URL IP Response Size

cdn.jsdelivr.net/npm/bootstrap-icons@1.8.1/font/bootstrap-icons.css

151.101.65.229

200 OK

10 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap-icons@1.8.1/font/bootstrap-icons.css
IP
151.101.65.229:443
ASN
#54113 FASTLY

Requested by
https://telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT

File type
ASCII text
Size
10 kB (10209 bytes)
Hash
79877fb82de8ca50845081e3c9a201c5
4f6ea69c0e03431ffa1a097a45453b5b3b246d8b
af35cc6aba34e5005de77099dfa72d4c1a7715d28ddcec343f48031dc8cb08bc

HTTP Headers

GET /npm/bootstrap-icons@1.8.1/font/bootstrap-icons.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telegramgirlshorny.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 1.8.1
x-jsd-version-type: version
etag: W/"13a7e-T26mnA4DQx/6Ggl6RUU7WzskbYs"
content-encoding: br
accept-ranges: bytes
date: Fri, 18 Oct 2024 12:12:23 GMT
age: 3670187
x-served-by: cache-fra-etou8220090-FRA, cache-hel1410023-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 10209
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

216.58.207.227

200 OK

19 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintA7:6D:44:6D:0D:8C:29:A8:CF:9A:12:0B:7C:B9:A0:F9:B0:72:5E:E9
ValidityMon, 30 Sep 2024 15:09:59 GMT - Mon, 23 Dec 2024 15:09:58 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18596, version 1.0
Size
19 kB (18596 bytes)
Hash
c83e4437a53d7f849f9d32df3d6b68f3
fabea5ad92ed3e2431659b02e7624df30d0c6bbc
d9bada3a44bb2ffa66dec5cc781cafc9ef17ed876cd9b0c5f7ef18228b63cebb

HTTP Headers

GET /s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://telegramgirlshorny.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18596
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 12 Oct 2024 07:17:55 GMT
expires: Sun, 12 Oct 2025 07:17:55 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Aug 2024 20:41:21 GMT
content-type: font/woff2
age: 536068
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap-icons@1.8.1/font/fonts/bootstrap-icons.woff2?524846017b983fc8ded9325d94ed40f3

151.101.65.229

200 OK

102 kB

URL GET HTTP/3
cdn.jsdelivr.net/npm/bootstrap-icons@1.8.1/font/fonts/bootstrap-icons.woff2?524846017b983fc8ded9325d94ed40f3
IP
151.101.65.229:443
ASN
#54113 FASTLY

Requested by
https://telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint6C:45:F5:9E:D3:37:60:0B:9C:A8:28:29:A4:E6:41:33:BB:2E:76:5C
ValidityTue, 30 Jul 2024 15:36:05 GMT - Sun, 31 Aug 2025 15:36:04 GMT

File type
Web Open Font Format (Version 2), TrueType, length 102536, version 1.0
Size
102 kB (102536 bytes)
Hash
1ed478a6b265d4b4f5c26bb063203588
1ca5e8c7d2fb8e9d60ad1a1feb2a46e98c248a3d
c874e14c63db86c4c5318c77cb557fce7036645edc7d690dcc1d23b389631b13

HTTP Headers

GET /npm/bootstrap-icons@1.8.1/font/fonts/bootstrap-icons.woff2?524846017b983fc8ded9325d94ed40f3 HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://telegramgirlshorny.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://cdn.jsdelivr.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-length: 102536
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: font/woff2
x-jsd-version: 1.8.1
x-jsd-version-type: version
etag: W/"19088-HKXox9L7jp1grRof6ypG6Ywkij0"
accept-ranges: bytes
age: 3641390
date: Fri, 18 Oct 2024 12:12:23 GMT
x-served-by: cache-fra-eddf8230061-FRA, cache-hel1410024-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

18 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintA7:6D:44:6D:0D:8C:29:A8:CF:9A:12:0B:7C:B9:A0:F9:B0:72:5E:E9
ValidityMon, 30 Sep 2024 15:09:59 GMT - Mon, 23 Dec 2024 15:09:58 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Size
18 kB (18536 bytes)
Hash
8eff0b8045fd1959e117f85654ae7770
227fee13ceb7c410b5c0bb8000258b6643cb6255
89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571

HTTP Headers

GET /s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://telegramgirlshorny.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18536
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 11 Oct 2024 18:11:53 GMT
expires: Sat, 11 Oct 2025 18:11:53 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Aug 2024 20:41:24 GMT
content-type: font/woff2
age: 583230
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

telegram.org/img/apple-touch-icon.png

149.154.167.99

200 OK

5.6 kB

URL GET HTTP/2
telegram.org/img/apple-touch-icon.png
IP
149.154.167.99:443
ASN
#62041 Telegram Messenger Inc

Requested by
https://telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium
Certificate
IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintC8:B7:84:85:FF:8F:0B:CA:9A:D6:E7:3E:81:F1:1E:94:39:D1:11:0A
ValiditySat, 10 Aug 2024 13:33:14 GMT - Thu, 11 Sep 2025 13:33:14 GMT

File type
PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced
Size
5.6 kB (5644 bytes)
Hash
295ccdb03006b8dfef45090dafbd46ac
491ab660270e47cbac6a5731c51cca71c1c1b2b1
a51d667d4262047c23e3a2a8aac3b46dc8a58c686cc013f2354011c07bf22cf3

HTTP Headers

GET /img/apple-touch-icon.png HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telegramgirlshorny.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 18 Oct 2024 12:12:23 GMT
content-type: image/png
content-length: 5644
last-modified: Thu, 21 Apr 2022 13:47:47 GMT
etag: "62616083-160c"
expires: Tue, 22 Oct 2024 12:12:23 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

telegram.org/img/website_icon.svg?4

149.154.167.99

200 OK

13 kB

URL GET HTTP/2
telegram.org/img/website_icon.svg?4
IP
149.154.167.99:443
ASN
#62041 Telegram Messenger Inc

Requested by
https://telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium
Certificate
IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintC8:B7:84:85:FF:8F:0B:CA:9A:D6:E7:3E:81:F1:1E:94:39:D1:11:0A
ValiditySat, 10 Aug 2024 13:33:14 GMT - Thu, 11 Sep 2025 13:33:14 GMT

File type
gzip compressed data, max speed, from Unix
Size
13 kB (12828 bytes)
Hash
1ad60e72c462ca12a083fb2fa5649d4a
a0b8264c8bf72563ef668224e16447ce52b47900
499b4f2f29abcdaf013f2df9e29a9d06447af79dfe1721a5cc26c83aff42669b

HTTP Headers

GET /img/website_icon.svg?4 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telegramgirlshorny.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 18 Oct 2024 12:12:23 GMT
content-type: image/svg+xml
last-modified: Mon, 20 Jul 2020 20:41:37 GMT
etag: W/"5f160181-768"
expires: Tue, 22 Oct 2024 12:12:23 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2

telegram.org/img/tgme/pattern.svg?1

149.154.167.99

200 OK

232 kB

URL GET HTTP/2
telegram.org/img/tgme/pattern.svg?1
IP
149.154.167.99:443
ASN
#62041 Telegram Messenger Inc

Requested by
https://telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium
Certificate
IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintC8:B7:84:85:FF:8F:0B:CA:9A:D6:E7:3E:81:F1:1E:94:39:D1:11:0A
ValiditySat, 10 Aug 2024 13:33:14 GMT - Thu, 11 Sep 2025 13:33:14 GMT

File type
SVG Scalable Vector Graphics image
Size
232 kB (231706 bytes)
Hash
d0c22c6a97023d85ba6e644a41c44a5d
4284efb616c182da4450c123174ce0e81a322845
118add53487c02aaf5b5ab9f69380fa06717deb10492e14aaa487e3c62806ad4

HTTP Headers

GET /img/tgme/pattern.svg?1 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://telegram.org/css/telegram.css?227
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 18 Oct 2024 12:12:23 GMT
content-type: image/svg+xml
last-modified: Thu, 05 Jan 2023 17:52:04 GMT
etag: W/"63b70e44-3891a"
expires: Tue, 22 Oct 2024 12:12:23 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2

telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium

172.66.46.217

200 OK

9.3 kB

URL User Request GET HTTP/2
telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium
IP
172.66.46.217:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjecttelegramgirlshorny.pages.dev
Fingerprint41:10:30:56:F3:07:EE:AD:E1:C3:64:2A:3E:70:1F:76:15:84:A1:7E
ValidityFri, 27 Sep 2024 06:42:56 GMT - Thu, 26 Dec 2024 06:42:55 GMT

File type
HTML document, ASCII text, with very long lines (9770), with no line terminators
Size
9.3 kB (9346 bytes)
Hash
611a1d3b23930916960de14e5ac2b094
66316701bd491cf2566cd084f90e151226464633
84c72c51be707166b286210feb7f10d4720f11b1cb5f183cad16206e9edecfc4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium HTTP/1.1
Host: telegramgirlshorny.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 18 Oct 2024 12:12:22 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6h2Ad6B%2FnO3vcQk2HrOZG3p9YIRAedOHlYV0G96uPtdyRSD%2BUSrU7i5Zz1cvxwXZfSFDizXlTuF5mYDhj4xyAOVIUA%2BG2TriySgLIOukII1BFRnw50H%2BvRHwCZm%2F%2FPYVOtYgd9xjSwJmmYbvf%2Fod"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d486fb239c3b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

telegram.org/css/telegram.css?227

149.154.167.99

200 OK

115 kB

URL GET HTTP/2
telegram.org/css/telegram.css?227
IP
149.154.167.99:443
ASN
#62041 Telegram Messenger Inc

Requested by
https://telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium
Certificate
IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintC8:B7:84:85:FF:8F:0B:CA:9A:D6:E7:3E:81:F1:1E:94:39:D1:11:0A
ValiditySat, 10 Aug 2024 13:33:14 GMT - Thu, 11 Sep 2025 13:33:14 GMT

File type
ASCII text, with very long lines (1267)
Size
115 kB (115228 bytes)
Hash
cc407e432532261714ca106e967bed72
6d93baf813ea6291da475634726d3d7b3fe415c2
f5f739b99351c1d64b3b890e80e78a9267e9ad2efe8116999ead3749d849e131

HTTP Headers

GET /css/telegram.css?227 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telegramgirlshorny.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 18 Oct 2024 12:12:23 GMT
content-type: text/css
last-modified: Mon, 23 Sep 2024 17:55:39 GMT
etag: W/"66f1ab9b-1c21c"
expires: Tue, 22 Oct 2024 12:12:23 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2

telegram.org/js/tgwallpaper.min.js?3

149.154.167.99

200 OK

3.0 kB

URL GET HTTP/2
telegram.org/js/tgwallpaper.min.js?3
IP
149.154.167.99:443
ASN
#62041 Telegram Messenger Inc

Requested by
https://telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium
Certificate
IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintC8:B7:84:85:FF:8F:0B:CA:9A:D6:E7:3E:81:F1:1E:94:39:D1:11:0A
ValiditySat, 10 Aug 2024 13:33:14 GMT - Thu, 11 Sep 2025 13:33:14 GMT

File type
ASCII text, with very long lines (2998), with no line terminators
Size
3.0 kB (2979 bytes)
Hash
f03422dc797fd26a3834b1ec041128ed
a6e88f4fe48b749c2b7360e8e004f64b6cfffb1a
046ec6b7909d0ca5cc6ef271a1b57b2f2be0bd88e3495fd8c496f1524e8ffaac

HTTP Headers

GET /js/tgwallpaper.min.js?3 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telegramgirlshorny.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 18 Oct 2024 12:12:23 GMT
content-type: application/javascript
last-modified: Thu, 03 Mar 2022 19:57:25 GMT
etag: W/"62211da5-ba3"
expires: Tue, 22 Oct 2024 12:12:23 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2

telegram.org/css/bootstrap.min.css?3

149.154.167.99

200 OK

42 kB

URL GET HTTP/2
telegram.org/css/bootstrap.min.css?3
IP
149.154.167.99:443
ASN
#62041 Telegram Messenger Inc

Requested by
https://telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium
Certificate
IssuerGoDaddy.com, Inc.
Subject*.telegram.org
FingerprintC8:B7:84:85:FF:8F:0B:CA:9A:D6:E7:3E:81:F1:1E:94:39:D1:11:0A
ValiditySat, 10 Aug 2024 13:33:14 GMT - Thu, 11 Sep 2025 13:33:14 GMT

File type
ASCII text, with very long lines (42164)
Size
42 kB (42523 bytes)
Hash
c2656e265ef58a9cc9f4b70b15da5fb9
85c5ebdb89d4574d72688c2650d4b84b9b09770a
f1d083ffaa644c708f11db29707aa57c19246e6d32643b03fee3f82c17b224b3

HTTP Headers

GET /css/bootstrap.min.css?3 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telegramgirlshorny.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx/1.18.0
date: Fri, 18 Oct 2024 12:12:23 GMT
content-type: text/css
last-modified: Fri, 10 Nov 2017 17:54:14 GMT
etag: W/"5a05e7c6-a61b"
expires: Tue, 22 Oct 2024 12:12:23 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2

telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/img/profile-1.jpg

172.66.46.217

200 OK

9.3 kB

URL GET HTTP/3
telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/img/profile-1.jpg
IP
172.66.46.217:443
ASN
#13335 CLOUDFLARENET

Requested by
https://telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium
Certificate
IssuerGoogle Trust Services
Subjecttelegramgirlshorny.pages.dev
Fingerprint41:10:30:56:F3:07:EE:AD:E1:C3:64:2A:3E:70:1F:76:15:84:A1:7E
ValidityFri, 27 Sep 2024 06:42:56 GMT - Thu, 26 Dec 2024 06:42:55 GMT

File type
HTML document, ASCII text, with very long lines (9770), with no line terminators
Size
9.3 kB (9346 bytes)
Hash
611a1d3b23930916960de14e5ac2b094
66316701bd491cf2566cd084f90e151226464633
84c72c51be707166b286210feb7f10d4720f11b1cb5f183cad16206e9edecfc4

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /,N/A,https:/openphish.com/img/profile-1.jpg HTTP/1.1
Host: telegramgirlshorny.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 18 Oct 2024 12:12:23 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FAh57K9%2BdSC1wpYjmWlhLRDLdQ4CG%2FWT0NlbIwEbLwhp2JX6cKz4ABYt38jV6fROoYUinzX%2B%2B6TkWW4Aw7XZobj6DLPbkembAH%2ByMurpap7U1mw0QZtd5ZdKZ6OTrVghaPOTzuPC4wdUyu3u6AKu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d486fb5ef43568d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/style.css

172.66.46.217

200 OK

0 B

URL GET HTTP/3
telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/style.css
IP
172.66.46.217:443
ASN
#13335 CLOUDFLARENET

Requested by
https://telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium
Certificate
IssuerGoogle Trust Services
Subjecttelegramgirlshorny.pages.dev
Fingerprint41:10:30:56:F3:07:EE:AD:E1:C3:64:2A:3E:70:1F:76:15:84:A1:7E
ValidityFri, 27 Sep 2024 06:42:56 GMT - Thu, 26 Dec 2024 06:42:55 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Telegram

HTTP Headers

GET /,N/A,https:/openphish.com/style.css HTTP/1.1
Host: telegramgirlshorny.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 18 Oct 2024 12:12:23 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BFEfZhgZY%2F0bGwEDo2GsAWuXPK%2BC%2F29DPprQ5p%2BzVBSqc8pKxc%2BZW%2FmLAk%2F9ZYYnb12%2BCm8xEIEhqx6Qo9L51CHcfIIQb%2BToIb0enWMzHEvEADQh8kewAyTNAYsml%2BBeMWuv%2FZ8yZUWpB29YyxYS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8d486fb5ef3b568d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.googleapis.com/css?family=Roboto:400,700

142.250.74.106

200 OK

4.5 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Roboto:400,700
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://telegramgirlshorny.pages.dev/,N/A,https:/openphish.com/feed.txt,18-Oct-24,High,Medium
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint04:E9:E7:03:97:99:66:D7:5B:E7:AE:2C:40:95:6F:E2:07:A3:7D:6C
ValidityMon, 30 Sep 2024 15:09:59 GMT - Mon, 23 Dec 2024 15:09:58 GMT

File type
ASCII text, with very long lines (4578), with no line terminators
Size
4.5 kB (4466 bytes)
Hash
6d0b9f3e80c21027a829a2b0d061959a
4673abab8affd592dc1059a2cb62981cfcbbe28e
d5b7e0a072ed8f95f7224be57152a40a4761c437d0168762329a071858b24d01

HTTP Headers

GET /css?family=Roboto:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://telegramgirlshorny.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 18 Oct 2024 12:12:23 GMT
date: Fri, 18 Oct 2024 12:12:23 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Mnemonic Secure DNS

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (14)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers