Report Overview
Visitedpublic
2026-09-11 10:04:32
Submit Tags
URL
castcum.com/
Finishing URL
castcum.com/
IP / ASN
208.180.77.176
Title
Sign in to Xfinity
Suspicious - Suspicious Javascript code
Detections
urlquery
1
Network Intrusion Detection
0
Threat Detection Systems
6
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| 28072 | 2003-01-23 | 2018-01-15 | 2026-09-11 | 569 B | 2.4 kB |  2.22.225.10 | ||
castcum.com 7 alert(s) on this Host | unknown | unknown | No data | No data | 480 B | 83 kB | 208.180.77.176 |  |
| 1222 | 2009-02-17 | 2012-05-23 | 2026-09-06 | 520 B | 103 kB |  104.17.24.14 |  |
Apache HTTP Server (Web servers)
Apache is a free and open-source cross-platform web server software.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | castcum.com/ | malware | Detects file containing Telegram Bot API |
| Cloudflare DNS | castcum.com | malicious | Sinkholed |
| DNS4EU | castcum.com | malicious | Sinkholed |
| Quad9 DNS | castcum.com | malicious | Sinkholed |
| CIRA Canadian Shield DNS | castcum.com | malicious | Sinkholed |
| OpenDNS | castcum.com | phishing | Phishing Block |
Telegram Bot detected (1)
URL
castcum.com/
IP / ASN
208.180.77.176
Token
8818228700:AAH6oYIeSJ0nl8kQbZVwRCoL3BF9PL46IF0
Bot Overview
User ID8818228700
Usernamelorddissickbot
First Namelorddissick
Last NameN/A
Chat Info
Chat ID7551185002
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs0
JavaScript (1)
No JavaScripts
HTTP Transactions (3)
| URL | IP | Response | Size |
|---|