Report Overview
Visitedpublic
2026-05-10 07:50:15
Submit Tags
URL
bafkreibyljmt5scyuoccu3ucintoqyfi33tvk6gvwng4pniq3pnoahrva4.ipfs.dweb.link/
Finishing URL
bafkreibyljmt5scyuoccu3ucintoqyfi33tvk6gvwng4pniq3pnoahrva4.ipfs.dweb.link/
IP / ASN
209.94.90.2
Title
Sign in to your account
Phishing - Microsoft
Phishing - Generic phishing
Phishing - Microsoft Outlook
Suspicious - Suspicious Javascript code
Detections
urlquery
5
Network Intrusion Detection
3
Threat Detection Systems
5
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
ajax.googleapis.com | 3691 | 2005-01-25 | 2012-05-22 | 2026-05-03 | 1.0 kB | 173 kB | 216.58.201.202 | |
maxcdn.bootstrapcdn.com | 6807 | 2012-05-25 | 2014-06-18 | 2026-05-04 | 1.2 kB | 196 kB |  104.18.10.207 |  |
fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-05-03 | 520 B | 2.0 kB | 142.251.142.234 | |
logincdn.msauth.net | 23083 | 2018-10-25 | 2019-04-23 | 2026-05-07 | 545 B | 45 kB | 13.107.246.53 |  |
firebasestorage.googleapis.com | 40974 | 2005-01-25 | 2017-01-30 | 2026-05-08 | 604 B | 536 B | 142.251.142.234 | |
code.jquery.com | 4915 | 2005-12-10 | 2012-05-21 | 2026-05-03 | 1.6 kB | 430 kB | 151.101.2.137 |   |
i.imgur.com | 3309 | 2009-01-09 | 2012-05-21 | 2026-05-07 | 491 B | 8.6 kB | 199.232.192.193 |   |
use.fontawesome.com | 6983 | 2012-10-18 | 2017-01-30 | 2026-05-04 | 597 B | 55 kB | 172.67.142.245 | |
l2.io | 151857 | 2012-05-12 | 2015-06-25 | 2026-05-03 | 469 B | 191 B |  195.80.159.133 |   |
cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-05-03 | 601 B | 20 kB | 104.17.24.14 | |
bafkreibyljmt5scyuoccu3ucintoqyfi33tvk6gvwng4pniq3pnoahrva4.ipfs.dweb.link 6 alert(s) on this Host | unknown | 2017-02-24 | 2026-05-09 | 2026-05-09 | 543 B | 70 kB | 209.94.90.2 |  |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Azure Front Door (Load balancers)
Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.Azure (PaaS)
Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Varnish (Caching)
Varnish is a reverse caching proxy.Amazon CloudFront (CDN)
Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.Amazon Web Services (PaaS)
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.Apache HTTP Server:2.4.65 (Web servers)
Apache is a free and open-source cross-platform web server software.Debian (Operating systems)
Debian is a Linux software which is a free open-source software.IPFS (Network storage)
IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | 209.94.90.2 | ET HUNTING Observed IPFS Gateway Domain (ipfs .dweb .link) in TLS SNI | |
| medium | Client IP | 195.80.159.133 | ET POLICY Observed IP Lookup Domain (l2 .io in TLS SNI) | |
| low | Client IP | 195.80.159.133 | ET INFO Observed External IP Lookup Domain (l2 .io) in TLS SNI |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | bafkreibyljmt5scyuoccu3ucintoqyfi33tvk6gvwng4pniq3pnoahrva4.ipfs.dweb.link/ | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | javascript.write.md5:c15023cc9147d9669ed25983318b8e13 | malware | Detects file containing Telegram Bot API |
| Cloudflare DNS | bafkreibyljmt5scyuoccu3ucintoqyfi33tvk6gvwng4pniq3pnoahrva4.ipfs.dweb.link | malicious | Sinkholed |
| OpenDNS | bafkreibyljmt5scyuoccu3ucintoqyfi33tvk6gvwng4pniq3pnoahrva4.ipfs.dweb.link | phishing | Phishing Block |
| DNS4EU | bafkreibyljmt5scyuoccu3ucintoqyfi33tvk6gvwng4pniq3pnoahrva4.ipfs.dweb.link | malicious | Sinkholed |
Telegram Bot detected (2)
URL
bafkreibyljmt5scyuoccu3ucintoqyfi33tvk6gvwng4pniq3pnoahrva4.ipfs.dweb.link/
IP / ASN
209.94.90.2
Token
8244424644:AAEGBSVFu0Sd_Uar7e8HidQYAq5-kVJAxFA
Bot Overview
User ID8244424644
UsernameNewYear_Live_loqbot
First NameNewYear-Live-loq_bot
Last NameN/A
Chat Info
Chat ID5145365326
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs1
Token
8244424644:AAEGBSVFu0Sd_Uar7e8HidQYAq5-kVJAxFA
Bot Overview
User ID8244424644
UsernameNewYear_Live_loqbot
First NameNewYear-Live-loq_bot
Last NameN/A
Chat Info
Chat ID5145365326
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs1
JavaScript (14)
| HASH | FROM | Size | First Seen | Last Seen | |||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| a8431d67ba7381a0b87ae070bb007fe4 | DocumentWrite | 52 kB | 2026-05-09 | 2026-05-10 | |||||||
Introduced by DocumentWrite First Seen 2026-05-09 Last Seen 2026-05-10 Times Seen 2 Size 52 kB (51611 bytes) MD5 a8431d67ba7381a0b87ae070bb007fe4 SHA1 c91e0fe611b235cdfeb51b4e5cacc9655df8921f Loading... | |||||||||||
| c15023cc9147d9669ed25983318b8e13 | DocumentWrite | 17 kB | 2026-05-09 | 2026-05-10 | |||||||
Introduced by DocumentWrite First Seen 2026-05-09 Last Seen 2026-05-10 Times Seen 2 Size 17 kB (17179 bytes) MD5 c15023cc9147d9669ed25983318b8e13 SHA1 3d006754cdf4865b6822fd1ec49f3144a04692cb Detections
Loading... | |||||||||||
HTTP Transactions (15)
| URL | IP | Response | Size |
|---|