Telegram: Launch @elite_637998_bot

https://t.me/elite_637998_bot?start=0210

Case summary

The target, observed result, and important findings.

Status
Current evaluation
Findings: 2Medium
Impersonated brand: TelegramOther cases impersonating Telegram Search for this value.
Submitted URL: https://share.google/6H9Pk7AYQm4gOuo8m Search for this value.
Effective URL: https://t.me/elite_637998_bot?start=0210 Search for this value.
Final URL: https://play.google.com/store/apps/details?id=org.telegram.messenger Search for this value.
Domain registration: share.googleMore than 90 days oldRegistered 2025-01-15 · Registrar MarkMonitor Inc.
Language: Detecting...
Network: 106 requests across 14 hosts
Favicon: 0019255c…610097f5 Search for this value.
Infrastructure: Loading...
Behavior: 0 recorded events
Interaction: 3 actions · 0 submissions · stopped: repeated state · download stage: click limit
1. clicksucceededSTART BOT
2. download control presssucceededDOWNLOAD
3. download control presssucceededDownload Telegram from Google Play
A successful press does not prove that a file arrived. Check the Payloads tab for recorded files.

How and when the analysis ran.

Detected findings grouped by risk

Network requests grouped by resource type

Recorded actions grouped by type

Requests to the most active hosts

First-party and third-party requests

Network responses grouped by MIME type