Report Overview
Visitedpublic
2026-05-22 06:16:54
Submit Tags
URL
cosmic-raindrop-2e0f38.netlify.app
Finishing URL
cosmic-raindrop-2e0f38.netlify.app/
IP / ASN
35.157.26.135
Title
Web Mail
Phishing - Generic phishing
Suspicious - Suspicious Javascript code
Detections
urlquery
3
Network Intrusion Detection
2
Threat Detection Systems
4
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
cosmic-raindrop-2e0f38.netlify.app 9 alert(s) on this Host | unknown | 2018-05-08 | 2026-05-22 | 2026-05-22 | 978 B | 12 kB | 63.176.8.218 |       |
code.jquery.com | 4915 | 2005-12-10 | 2012-05-21 | 2026-05-17 | 1.4 kB | 447 kB |  151.101.194.137 |   |
ajax.googleapis.com | 3691 | 2005-01-25 | 2012-05-22 | 2026-05-17 | 463 B | 87 kB | 216.58.201.234 | |
homenestapptime.netlify.app | unknown | 2018-05-08 | 2025-01-25 | 2026-05-22 | 938 B | 624 B | 63.176.8.218 | |
cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-05-17 | 521 B | 20 kB |  104.17.24.14 | |
ipinfo.io | 1327 | 2013-04-23 | 2013-12-16 | 2026-05-20 | 469 B | 514 B | 34.117.59.81 |   |
Google Hosted Libraries (CDN)
Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.jQuery CDN (CDN)
jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.Netlify (PaaS, CDN)
Netlify providers hosting and server-less backend services for web applications and static websites.jQuery:2.2.4 (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.cdnjs (CDN)
cdnjs is a free distributed JS library delivery service.Popper:1.12.9 (Miscellaneous)
Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Varnish (Caching)
Varnish is a reverse caching proxy.Google Cloud (IaaS)
Google Cloud is a suite of cloud computing services.Google Cloud CDN (CDN)
Cloud CDN uses Google's global edge network to serve content closer to users.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium | Client IP | 63.176.8.218 | ET HUNTING Suspicious Netlify Hosted TLS SNI Request - Possible Phishing Landing | |
| medium | Client IP | 34.117.59.81 | ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | cosmic-raindrop-2e0f38.netlify.app/ | malware | Detects file containing Telegram Bot API |
| OpenDNS | cosmic-raindrop-2e0f38.netlify.app | phishing | Phishing Block |
| DNS4EU | cosmic-raindrop-2e0f38.netlify.app | malicious | Sinkholed |
| Cloudflare DNS | cosmic-raindrop-2e0f38.netlify.app | malicious | Sinkholed |
Telegram Bot detected (1)
URL
cosmic-raindrop-2e0f38.netlify.app/
IP / ASN
63.176.8.218
Token
6854587967:AAHo8C2yHB7jdUjFfMWUZHMETU5KG4Rgbzk
Bot Overview
User ID6854587967
Usernamelionsexy_bot
First Namelion007_bot
Last NameN/A
Chat Info
Chat ID7446796120
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs1
JavaScript (6)
No JavaScripts
HTTP Transactions (10)
| URL | IP | Response | Size |
|---|