Report Overview
Visitedpublic
2026-05-22 06:16:38
Submit Tags
URL
webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool
Finishing URL
webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool/
IP / ASN

43.174.247.29
Title
Email Portal Access | Secure Digital Platform
Phishing - Generic phishing
Suspicious - Suspicious Javascript code
Detections
urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
6
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool 12 alert(s) on this Host | unknown | unknown | 2026-05-22 | 2026-05-22 | 1.0 kB | 36 kB | ![]() 43.174.246.29 | ![]() |
cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-05-17 | 1.1 kB | 1.2 MB | ![]() 104.17.24.14 | |
i.ibb.co | 21643 | 2010-07-20 | 2018-11-25 | 2026-05-21 | 956 B | 43 kB | ![]() 45.43.142.4 | |
maxcdn.bootstrapcdn.com | 6807 | 2012-05-25 | 2014-06-18 | 2026-05-18 | 1.1 kB | 196 kB | ![]() 104.18.10.207 | |
code.jquery.com | 4915 | 2005-12-10 | 2012-05-21 | 2026-05-17 | 535 B | 90 kB | ![]() 151.101.66.137 |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Popper:1.12.9 (Miscellaneous)
Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.BootstrapCDN:4.0.0 (CDN)
BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.Bootstrap:4.0.0 (UI frameworks)
Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.jQuery CDN (CDN)
jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.jQuery:3.6.0 (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.Font Awesome (Font scripts)
Font Awesome is a font and icon toolkit based on CSS and Less.cdnjs (CDN)
cdnjs is a free distributed JS library delivery service.OpenResty (Web servers)
OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Varnish (Caching)
Varnish is a reverse caching proxy.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool/ | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool/favicon.ico | malware | Detects file containing Telegram Bot API |
| DigiCert UltraDNS | webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool | malicious | Sinkholed |
| OpenDNS | webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool | phishing | Phishing Block |
| DNS4EU | webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool | malicious | Sinkholed |
| Hagezi Threat Feed | webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool | malicious | Sinkholed |
Telegram Bot detected (1)
URL
webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool/
IP / ASN

43.174.246.29
Token
7569692987:AAEgzDYfGDZN2s4vODsDpINBXZj4wZw3r1k
Bot Overview
User ID7569692987
Usernamedadytom_bot
First Namemillions
Last NameN/A
Chat Info
Chat ID1494679216
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs0
JavaScript (7)
No JavaScripts
HTTP Transactions (9)
| URL | IP | Response | Size |
|---|



