Report Overview
Visitedpublic
2026-01-06 05:28:16
Tags
Submit Tags
URL
reliabilityups.com/home/Zahlung.html?name=efvefv&track=1JDC00045564987710
Finishing URL
reliabilityups.com/home/Zahlung.html?name=efvefv&track=1JDC00045564987710
IP / ASN
192.185.167.31
Title
DHL Sendungsverfolgung - Zahlung
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
2
Threat Detection Systems
5
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
www.dhl.de | 12688 | unknown | 2012-07-29 | 2025-12-20 | 479 B | 8.9 kB |  184.86.1.202 |  |
ipwho.is | 18239 | 2022-01-29 | 2020-06-08 | 2026-01-01 | 432 B | 1.2 kB |  185.111.111.158 |  |
api.telegram.org | 206724 | 2003-12-15 | 2015-06-25 | 2026-01-01 | 1.1 kB | 748 B | 149.154.166.110 |  |
reliabilityups.com 10 alert(s) on this Host | unknown | unknown | No data | No data | 1.0 kB | 22 kB | 192.185.167.31 |  |
PayPal (Payment processors)
PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders.Bunny (CDN)
Nginx:1.18.0 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Apache HTTP Server (Web servers)
Apache is a free and open-source cross-platform web server software.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low |  172.18.0.43 | 149.154.166.110 | ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI) | |
| low | 172.18.0.43 | 149.154.166.110 | ET HUNTING Observed Telegram API Domain (api .telegram .org in TLS SNI) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | reliabilityups.com/home/Zahlung.html?name=efvefv&track=1JDC00045564987710 | malware | Detects file containing Telegram Bot API |
| OpenDNS | reliabilityups.com | phishing | Phishing Block |
| Hagezi Threat Feed | reliabilityups.com | malicious | Sinkholed |
| DNS0 Zero | reliabilityups.com | malicious | Sinkholed |
| DNS4EU | reliabilityups.com | malicious | Sinkholed |
JavaScript (1)
No JavaScripts
HTTP Transactions (6)
| URL | IP | Response | Size |
|---|