Report Overview
Visitedpublic
2026-09-27 03:21:21
Submit Tags
URL
theodore3.com/the-cover-up/wp-content/upgrade/Microsoft.html
Finishing URL
theodore3.com/the-cover-up/wp-content/upgrade/Microsoft.html
IP / ASN
162.241.24.83
Title
Microsoft | Login
Phishing - Known Phishing Kit detected
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
7
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| 6983 | 2012-10-18 | 2017-01-30 | 2026-09-21 | 1.1 kB | 130 kB |  172.67.142.245 |  | |
| 1222 | 2009-02-17 | 2012-05-23 | 2026-09-20 | 489 B | 20 kB | 104.17.24.14 | | |
| 3691 | 2005-01-25 | 2012-05-22 | 2026-09-21 | 484 B | 87 kB | 142.250.178.106 | ||
| 5248 | 2018-10-25 | 2018-11-19 | 2026-09-23 | 590 B | 18 kB | 13.107.246.53 |  | |
storageapi.fleek.co 1 alert(s) on this Host | 3295345 | 2020-03-06 | 2020-05-08 | 2026-08-25 | 587 B | 434 B | 172.67.68.7 | |
theodore3.com 9 alert(s) on this Host | unknown | unknown | 2013-04-30 | 2023-03-02 | 1.1 kB | 487 kB | 162.241.24.83 |      |
| 4915 | 2005-12-10 | 2012-05-21 | 2026-09-21 | 464 B | 70 kB | 151.101.65.155 |  | |
www.theodore3.com 2 alert(s) on this Host | unknown | 2007-06-22 | 2013-04-30 | 2026-09-23 | 545 B | 24 kB | 162.241.24.83 |  |
| 313 | 2005-01-25 | 2012-05-23 | 2026-09-20 | 516 B | 2.0 kB | 142.250.178.42 | ||
| 6807 | 2012-05-25 | 2014-06-18 | 2026-09-21 | 483 B | 50 kB | 104.18.10.207 | |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Azure (PaaS)
Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.Azure Front Door (Load balancers)
Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.Bluehost (Hosting)
Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.Nginx:1.29.8 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.MySQL (Databases)
MySQL is an open-source relational database management system.PHP (Programming languages)
PHP is a general-purpose scripting language used for web development.WordPress (CMS, Blogs)
WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Varnish (Caching)
Varnish is a reverse caching proxy.Apache HTTP Server (Web servers)
Apache is a free and open-source cross-platform web server software.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | theodore3.com/the-cover-up/wp-content/upgrade/Microsoft.html | malware | Detects file containing Telegram Bot API |
| DNS4EU | storageapi.fleek.co | malicious | Sinkholed |
| DNS4EU | theodore3.com | malicious | Sinkholed |
| OpenDNS | theodore3.com | phishing | Phishing Block |
| Quad9 DNS | theodore3.com | malicious | Sinkholed |
| Quad9 DNS | www.theodore3.com | malicious | Sinkholed |
| OpenDNS | www.theodore3.com | phishing | Phishing Block |
Telegram Bot detected (1)
URL
theodore3.com/the-cover-up/wp-content/upgrade/Microsoft.html
IP / ASN
162.241.24.83
Token
8696689041:AAH2WWu_SVcD9QDEmArq3prWX2KJ-0EaHyA
Bot Overview
User ID8696689041
UsernameMoneyMustbot
First Namemoneymustbot
Last NameN/A
Chat Info
Chat ID6440213344
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs1
JavaScript (6)
No JavaScripts
HTTP Transactions (12)
| URL | IP | Response | Size |
|---|