Report Overview
Visitedpublic
2026-05-09 19:30:37
URL
bafkreigkd676mhdtdzfgdzpu5o5m6z63lq2femt7lrw5ku666rcmayatb4.ipfs.dweb.link/
Finishing URL
bafkreigkd676mhdtdzfgdzpu5o5m6z63lq2femt7lrw5ku666rcmayatb4.ipfs.dweb.link/
IP / ASN
209.94.90.2
#40680 PROTOCOL
Title
Sign in to your account

Phishing - Microsoft

Phishing - Generic phishing

Suspicious - Suspicious Javascript code

Detections

urlquery
4
Network Intrusion Detection
3
Threat Detection Systems
4

Host Summary

HostRankRegisteredFirst SeenLast Seen
bafkreigkd676mhdtdzfgdzpu5o5m6z63lq2femt7lrw5ku666rcmayatb4.ipfs.dweb.link
unknown2017-02-242026-05-092026-05-09
maxcdn.bootstrapcdn.com
68072012-05-252014-06-182026-05-04
l2.io
1518572012-05-122015-06-252026-05-03
ajax.googleapis.com
36912005-01-252012-05-222026-05-03
firebasestorage.googleapis.com
409742005-01-252017-01-302026-05-08
use.fontawesome.com
69832012-10-182017-01-302026-05-04
cdnjs.cloudflare.com
12222009-02-172012-05-232026-05-03
i.imgur.com
33092009-01-092012-05-212026-05-07
code.jquery.com
49152005-12-102012-05-212026-05-03
logincdn.msauth.net
230832018-10-252019-04-232026-05-07
fonts.googleapis.com
3132005-01-252012-05-232026-05-03

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IP
209.94.90.2
ET HUNTING Observed IPFS Gateway Domain (ipfs .dweb .link) in TLS SNI
mediumClient IP
195.80.159.133
ET POLICY Observed IP Lookup Domain (l2 .io in TLS SNI)
lowClient IP
195.80.159.133
ET INFO Observed External IP Lookup Domain (l2 .io) in TLS SNI
Threat Detection Systems
Detection SystemIndicatorVerdictAlert
YARAhub by abuse.chbafkreigkd676mhdtdzfgdzpu5o5m6z63lq2femt7lrw5ku666rcmayatb4.ipfs.dweb.link/malware
Detects file containing Telegram Bot API
Cloudflare DNSbafkreigkd676mhdtdzfgdzpu5o5m6z63lq2femt7lrw5ku666rcmayatb4.ipfs.dweb.linkmalicious
Sinkholed
OpenDNSbafkreigkd676mhdtdzfgdzpu5o5m6z63lq2femt7lrw5ku666rcmayatb4.ipfs.dweb.linkphishing
Phishing Block
DNS4EUbafkreigkd676mhdtdzfgdzpu5o5m6z63lq2femt7lrw5ku666rcmayatb4.ipfs.dweb.linkmalicious
Sinkholed

Telegram Bot detected (1)

URL
bafkreigkd676mhdtdzfgdzpu5o5m6z63lq2femt7lrw5ku666rcmayatb4.ipfs.dweb.link/
IP / ASN
209.94.90.2
#40680 PROTOCOL
Token
8060530587:AAFrPwnyvvnmu1rh3u4Mw6xRotGr-X0Wqcw
Bot Overview
User ID8060530587
Usernamepopp132bot
First Nameloll
Last NameN/A
Chat Info
Chat ID5242637686
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs1

JavaScript (11)

HTTP Transactions (16)

URLIPResponseSize