Hagezi Threat Feed Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://auth.discord-securate.com/verify?data=eyJndWlsZElkIjoiMTQ5MTMxNTUzOTc3NDE0NDU3MiIsImNsaWVudElkIjoiMTQ5OTg1OTA0MDI3OTQ2NjE3NyIsImV4cGlyZXMiOjE3Nzc3ODIxMTc1MTUsImRvbWFpbiI6ImluZm8uZGlzY29yZC1zZWN1cmF0ZS5jb20iLCJuYW1lIjoiQ2FuZHklMjBHaXJscyUyMCVFMiU4MCVBMiUyMCVGMCU5RiU4RCVBQyJ9/
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://auth.discord-securate.com/verify?data=eyJndWlsZElkIjoiMTQ5MTMxNTUzOTc3NDE0NDU3MiIsImNsaWVudElkIjoiMTQ5OTg1OTA0MDI3OTQ2NjE3NyIsImV4cGlyZXMiOjE3Nzc3ODIxMTc1MTUsImRvbWFpbiI6ImluZm8uZGlzY29yZC1zZWN1cmF0ZS5jb20iLCJuYW1lIjoiQ2FuZHklMjBHaXJscyUyMCVFMiU4MCVBMiUyMCVGMCU5RiU4RCVBQyJ9/
- Submitted IP / ASN
172.67.166.151 AS13335 · CLOUDFLARENET
- Final URL
- https://t.me/+v2TFbWGW-AFkYTJh#
- Final IP / ASN
149.154.167.99 AS62041 · Telegram Messenger Inc
Final page
- Page title
- Telegram: Join Group Chat
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 7.5 KB (7703 bytes)
Detections
Activity
- HTTP requests
- 12
- Observed hosts
- 4
- Script records
- 1
Estimated HTTP data
- Sent
- ~5.9 KB
- Received
- ~486.9 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| cdn1.telesco.pe | 3770649 | N/A | 2017-07-25 | 2026-04-27 | 765 B | 37.2 KB |  149.154.175.204 | Nginx:1.18.0 Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| auth.discord-securate.com 1 alerts | N/A | 2026-05-01 | 2026-05-02 | 2026-05-02 | 743 B | 11.2 KB | 172.67.166.151 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| t.me | 146 | 2010-05-20 | 2015-06-29 | 2026-04-30 | 490 B | 11.1 KB | 149.154.167.99 | Bootstrap UI frameworks Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components. Paper.js JavaScript graphics Paper.js is an open-source vector graphics scripting framework that operates on the HTML5 Canvas. Nginx:1.18.0 Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| telegram.org | 499 | 2003-12-15 | 2013-12-18 | 2026-04-29 | 4.0 KB | 427.4 KB | 149.154.167.99 | Nginx:1.18.0 Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |