Report Overview
Visitedpublic
2026-05-22 06:16:38
URL
webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool
Finishing URL
webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool/
IP / ASN
43.174.247.29
#0
Title
Email Portal Access | Secure Digital Platform

Phishing - Generic phishing

Suspicious - Suspicious Javascript code

Detections

urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
6

Host Summary

HostRankRegisteredFirst SeenLast Seen
webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool
unknownunknown2026-05-222026-05-22
cdnjs.cloudflare.com
12222009-02-172012-05-232026-05-17
i.ibb.co
216432010-07-202018-11-252026-05-21
maxcdn.bootstrapcdn.com
68072012-05-252014-06-182026-05-18
code.jquery.com
49152005-12-102012-05-212026-05-17

Related reports

Threat Detection Systems
Detection SystemIndicatorVerdictAlert
YARAhub by abuse.chwebmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool/malware
Detects file containing Telegram Bot API
YARAhub by abuse.chwebmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool/favicon.icomalware
Detects file containing Telegram Bot API
DigiCert UltraDNSwebmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.coolmalicious
Sinkholed
OpenDNSwebmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.coolphishing
Phishing Block
DNS4EUwebmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.coolmalicious
Sinkholed
Hagezi Threat Feedwebmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.coolmalicious
Sinkholed

Telegram Bot detected (1)

URL
webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool/
IP / ASN
43.174.246.29
#0
Token
7569692987:AAEgzDYfGDZN2s4vODsDpINBXZj4wZw3r1k
Bot Overview
User ID7569692987
Usernamedadytom_bot
First Namemillions
Last NameN/A
Chat Info
Chat ID1494679216
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs0

JavaScript (7)

HTTP Transactions (9)

URLIPResponseSize