Report Overview
Visitedpublic
2026-07-29 00:41:54
Submit Tags
URL
pgroup.ro/css/wmail.html
Finishing URL
pgroup.ro/css/wmail.html
IP / ASN
89.44.139.129
Title
Webmail Portal Access
Phishing - Generic phishing
Suspicious - Suspicious Javascript code
Detections
urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
1
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
via.placeholder.com | 229550 | 2002-05-05 | 2017-06-01 | 2026-07-25 | 539 B | 0 B |  | |
pgroup.ro 3 alert(s) on this Host | unknown | 2004-10-14 | 2026-07-29 | 2026-07-29 | 1.0 kB | 8.0 kB | 89.44.139.129 |   |
cdn.jsdelivr.net | 1678 | 2012-05-16 | 2012-09-30 | 2026-07-26 | 516 B | 234 kB |  151.101.129.229 | |
cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-07-26 | 1.1 kB | 261 kB | 104.17.24.14 |  |
LiteSpeed (Web servers)
LiteSpeed is a high-scalability web server.Bootstrap:5.3.3 (UI frameworks)
Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | pgroup.ro/css/wmail.html | malware | Detects file containing Telegram Bot API |
Telegram Bot detected (1)
URL
pgroup.ro/css/wmail.html
IP / ASN
89.44.139.129
Token
8385142980:AAH20sMXl0GSyVHVcjEEcx63ERma_5UVdpc
Bot Overview
User ID8385142980
Usernamewalatalogsbot
First Namewalatalogs
Last NameN/A
Chat Info
Chat ID6457276611
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs0
JavaScript (1)
No JavaScripts
HTTP Transactions (6)
| URL | IP | Response | Size |
|---|