Report Overview
Visitedpublic
2026-10-04 03:51:52
Submit Tags
URL
purchasing-order.geminilaunch.com/
Finishing URL
purchasing-order.geminilaunch.com/
IP / ASN
216.150.1.1
Title
Access your document
Phishing - Known Phishing Kit detected
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
6
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| 1222 | 2009-02-17 | 2012-05-23 | 2026-09-27 | 529 B | 20 kB |  104.17.25.14 |  | |
| 3691 | 2005-01-25 | 2012-05-22 | 2026-09-28 | 1.0 kB | 174 kB | 142.250.178.106 | ||
| 6807 | 2012-05-25 | 2014-06-18 | 2026-09-28 | 1.1 kB | 196 kB | 104.18.11.207 | | |
| 2096508 | 2000-12-08 | 2012-08-21 | 2026-10-02 | 600 B | 19 kB | 172.66.160.114 | | |
| 4915 | 2005-12-10 | 2012-05-21 | 2026-09-28 | 504 B | 70 kB | 151.101.65.155 |   | |
| 16651 | 2012-10-18 | 2019-03-29 | 2026-09-28 | 497 B | 470 B | 104.18.40.68 | | |
purchasing-order.geminilaunch.com 13 alert(s) on this Host | unknown | 2026-04-13 | 2026-10-02 | 2026-10-02 | 997 B | 34 kB | 216.150.1.193 |  |
| 21970 | 2012-05-25 | 2018-04-05 | 2026-09-28 | 510 B | 52 kB | 104.18.10.207 | | |
| 21175 | 2011-05-24 | 2012-10-03 | 2026-09-29 | 606 B | 527 B | 104.16.78.6 | | |
| 313 | 2005-01-25 | 2012-05-23 | 2026-09-27 | 536 B | 2.0 kB | 142.250.178.42 |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Varnish (Caching)
Varnish is a reverse caching proxy.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Vercel (PaaS)
Vercel is a cloud platform for static frontends and serverless functions.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | purchasing-order.geminilaunch.com/ | malware | Detects file containing Telegram Bot API |
| CIRA Canadian Shield DNS | purchasing-order.geminilaunch.com | malicious | Sinkholed |
| OpenDNS | purchasing-order.geminilaunch.com | phishing | Phishing Block |
| Quad9 DNS | purchasing-order.geminilaunch.com | malicious | Sinkholed |
| DNS4EU | purchasing-order.geminilaunch.com | malicious | Sinkholed |
| Cloudflare DNS | purchasing-order.geminilaunch.com | malicious | Sinkholed |
Telegram Bot detected (1)
URL
purchasing-order.geminilaunch.com/
IP / ASN
216.150.1.193
Token
8451120809:AAHaLFPpO8Rk5A5deGgWhlhDcBR7sXL4Xfw
Bot Overview
User ID8451120809
UsernameBambam1988_bot
First Namebabamraw
Last NameN/A
Chat Info
Chat ID1732475348
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs0
JavaScript (11)
No JavaScripts
HTTP Transactions (13)
| URL | IP | Response | Size |
|---|