Report Overview
Visitedpublic
2026-02-26 01:16:36
URL
ipfs.io/ipfs/bafkreibeokjx66yldu55knrvs6jj2aeixup5im6upfnne63p3xarpfntom?filename=alldomain_okp.html
Finishing URL
ipfs.io/ipfs/bafkreibeokjx66yldu55knrvs6jj2aeixup5im6upfnne63p3xarpfntom?filename=alldomain_okp.html
IP / ASN
209.94.90.1
#40680 PROTOCOL
Title
Webmail Sign-in

Suspicious - Suspicious Javascript code

Detections

urlquery
2
Network Intrusion Detection
2
Threat Detection Systems
2

Host Summary

HostRankRegisteredFirst SeenLast Seen
t2.gstatic.com
unknown2008-02-112013-05-072026-02-19
cdn.jsdelivr.net
16782012-05-162012-09-302026-02-22
fonts.googleapis.com
3132005-01-252012-05-232026-02-22
fonts.gstatic.com
unknown2008-02-112014-04-022026-02-22
api.ipify.org
81662014-01-052014-10-062026-02-23
ipfs.io
192712014-05-162015-09-092026-02-20
www.google.com
221997-09-152015-05-102026-02-22

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IP
209.94.90.1
ET INFO Observed Peer-to-Peer File Sharing Service Domain (ipfs .io in TLS SNI)
lowClient IP
104.26.13.205
ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI
Threat Detection Systems
Detection SystemIndicatorVerdictAlert
YARAhub by abuse.chipfs.io/ipfs/bafkreibeokjx66yldu55knrvs6jj2aeixup5im6upfnne63p3xarpfntom?filename=alldomain_okp.htmlmalware
Detects file containing Telegram Bot API
DigiCert UltraDNSipfs.iomalicious
Sinkholed

Telegram Bot detected (1)

URL
ipfs.io/ipfs/bafkreibeokjx66yldu55knrvs6jj2aeixup5im6upfnne63p3xarpfntom?filename=alldomain_okp.html
IP / ASN
209.94.90.1
#40680 PROTOCOL
Token
7857551069:AAFaU6JhmqSJrF8fF_xaO74wpmFMXW5oKYM
Bot Overview
User ID7857551069
UsernamekapssinBot
First Namekapssin
Last NameN/A
Chat Info
Chat ID1578242057
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs0

JavaScript (4)

HTTP Transactions (10)

URLIPResponseSize