Report Overview
Visitedpublic
2026-06-01 12:19:55
Tags
Submit Tags
URL
hcxr-42552.wasmer.app
Finishing URL
hcxr-42552.wasmer.app/
IP / ASN
144.76.124.123
Title
Navy Federal Credit Union - Our Members are the Mission®
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
4
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
hcxr-42552.wasmer.app 10 alert(s) on this Host | unknown | 2018-10-16 | 2026-06-01 | 2026-06-01 | 1.5 kB | 3.8 MB | 144.76.124.123 |  |
cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-05-31 | 482 B | 32 kB |  104.17.25.14 |  |
digitalapps.navyfederal.org | 93913 | 1997-03-24 | 2020-08-13 | 2026-05-31 | 1.9 kB | 5.0 kB |  184.25.10.9 |  |
PHP:8.3.21 (Programming languages)
PHP is a general-purpose scripting language used for web development.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Akamai (CDN)
Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | javascript.write.md5:2e9440220a29d22262014a3e064b8c89 | malware | Detects file containing Telegram Bot API |
| OpenDNS | hcxr-42552.wasmer.app | phishing | Phishing Block |
| Cloudflare DNS | hcxr-42552.wasmer.app | malicious | Sinkholed |
| DNS4EU | hcxr-42552.wasmer.app | malicious | Sinkholed |
Telegram Bot detected (1)
Token
8927109451:AAHG37V5V9w6U0iqJD-NHGnX2xXId8PJaOU
Bot Overview
User ID8927109451
UsernameJgvdbdgbm_bot
First NameJgvdbdgbm
Last NameN/A
Chat Info
Chat ID8682359469
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs1
JavaScript (4)
| HASH | FROM | Size | First Seen | Last Seen | |||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| bf0edab49db76354d2d326b7e724a839 | DocumentWrite | 1.3 MB | 2026-06-01 | 2026-06-01 | |||||||
Introduced by DocumentWrite First Seen 2026-06-01 Last Seen 2026-06-01 Times Seen 2 Size 1.3 MB (1261033 bytes) MD5 bf0edab49db76354d2d326b7e724a839 SHA1 077a43dc9a18dcf4a0a7225841768ae9cc81042c Loading... | |||||||||||
| 2e9440220a29d22262014a3e064b8c89 | DocumentWrite | 105 kB | 2026-06-01 | 2026-06-01 | |||||||
Introduced by DocumentWrite First Seen 2026-06-01 Last Seen 2026-06-01 Times Seen 2 Size 105 kB (104683 bytes) MD5 2e9440220a29d22262014a3e064b8c89 SHA1 4d4dc2f4ed9e5d3d4f53aacf99137d7d524c859c Detections
Loading... | |||||||||||
HTTP Transactions (8)
| URL | IP | Response | Size |
|---|