Report Overview
Visitedpublic
2026-05-29 12:39:24
Tags
Submit Tags
URL
gosmainretrog8t.wasmer.app
Finishing URL
gosmainretrog8t.wasmer.app/
IP / ASN
144.76.124.123
Title
Navy Federal Credit Union - Our Members are the Mission®
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
4
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
digitalapps.navyfederal.org | 93913 | 1997-03-24 | 2020-08-13 | 2026-05-24 | 4.4 kB | 2.8 kB |  184.25.10.9 |  |
gosmainretrog8t.wasmer.app 9 alert(s) on this Host | unknown | 2018-10-16 | 2026-05-29 | 2026-05-29 | 1.5 kB | 11 MB | 144.76.124.123 |  |
cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-05-24 | 487 B | 32 kB |  104.17.25.14 |  |
Akamai (CDN)
Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.Akamai Bot Manager (Security)
Akamai Bot Manager detect bots using device fingerprinting bot signatures.PHP:8.3.21 (Programming languages)
PHP is a general-purpose scripting language used for web development.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | javascript.write.md5:9f26981a0219c9af5bd70926ae8f11e8 | malware | Detects file containing Telegram Bot API |
| OpenDNS | gosmainretrog8t.wasmer.app | phishing | Phishing Block |
| Cloudflare DNS | gosmainretrog8t.wasmer.app | malicious | Sinkholed |
| DNS4EU | gosmainretrog8t.wasmer.app | malicious | Sinkholed |
Telegram Bot detected (1)
Token
8619822641:AAEBP5QWVMt4oDX_uegYfUV2HK6Mjt4o62U
Bot Overview
User ID8619822641
Usernamenfcuredit_bot
First NameREDIT
Last NameN/A
Chat Info
Chat ID1140634155
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs1
JavaScript (3)
| HASH | FROM | Size | First Seen | Last Seen | |||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| 59a263bcd011fc7af14af396783ba3a3 | DocumentWrite | 3.8 MB | 2026-05-29 | 2026-05-31 | |||||||
Introduced by DocumentWrite First Seen 2026-05-29 Last Seen 2026-05-31 Times Seen 6 Size 3.8 MB (3784980 bytes) MD5 59a263bcd011fc7af14af396783ba3a3 SHA1 10e1573cc71d56f09113c302a5357754585cf167 Loading... | |||||||||||
| d41d8cd98f00b204e9800998ecf8427e | DocumentWrite | 0 B | 0001-01-01 | 2026-06-06 | |||||||
Introduced by DocumentWrite First Seen 0001-01-01 Last Seen 2026-06-06 Times Seen 16183249 Size 0 B (0 bytes) MD5 d41d8cd98f00b204e9800998ecf8427e SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 Loading... | |||||||||||
| 9f26981a0219c9af5bd70926ae8f11e8 | DocumentWrite | 105 kB | 2026-05-29 | 2026-05-31 | |||||||
Introduced by DocumentWrite First Seen 2026-05-29 Last Seen 2026-05-31 Times Seen 6 Size 105 kB (105168 bytes) MD5 9f26981a0219c9af5bd70926ae8f11e8 SHA1 e80c76600603213a6fc2737faaf94eefafad84c0 Detections
Loading... | |||||||||||
HTTP Transactions (8)
| URL | IP | Response | Size |
|---|