Report Overview

  1. Visited public
    2025-06-13 09:49:14
  2. URL

    mailserver-2-j37z.4everland.app/mailserver.html

  3. Finishing URL

    mailserver-2-j37z.4everland.app/mailserver.html

  4. IP / ASN
    104.21.7.158

    #13335 CLOUDFLARENET

    Title
    mailserver-2-j37z.4everland.app/mailserver.html
  5. Phishing - Generic phishing

    Suspicious - Suspicious Javascript code

Detections
urlquery
6
Network Intrusion Detection
1
Threat Detection Systems
4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
www.google.com71997-09-152015-05-102025-06-11
image.thum.io2827252016-02-042017-02-032025-06-09
stackpath.bootstrapcdn.com24672012-05-252018-04-052025-06-11
ka-f.fontawesome.com35982012-10-182019-12-172025-06-06
maxcdn.bootstrapcdn.com7242012-05-252014-06-182025-06-11
code.jquery.com6342005-12-102012-05-212025-06-11
ajax.googleapis.com129052005-01-252012-05-222025-06-11
cdnjs.cloudflare.com2352009-02-172012-05-232025-06-11
kit.fontawesome.com18682012-10-182019-03-292025-06-11
mailserver-2-j37z.4everland.appunknown2021-07-082025-06-132025-06-13
fonts.googleapis.com88772005-01-252012-05-232025-06-11

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IP 3.215.74.204

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediummailserver-2-j37z.4everland.app/mailserver.htmlDetects file containing Telegram Bot API

OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
medium4everland.appSinkholed

ThreatFox

No alerts detected


Telegram Bot detected

  1. URL

    mailserver-2-j37z.4everland.app/mailserver.html

  2. IP / ASN
    188.114.96.1

    #13335 CLOUDFLARENET

  1. Token

    7564505147:AAF99pQx6XX_-pBzc0w6VJjdG7G7Cw_1xIM

  1. Bot Overview

    User ID 7564505147
    Username linkssserver_bot
    First Name linkseverrrbot
    Last Name
  2. Chat Information

    Chat ID 1443320838
    Chat Type private
    Title
    User Count 2
    Admins 0
    Pending Messages 0

JavaScript (11)

HTTP Transactions (17)

URLIPResponseSize
GET mailserver-2-j37z.4everland.app/mailserver.html
188.114.96.1200 OK365 kB
GET code.jquery.com/jquery-3.2.1.slim.min.js
151.101.2.137200 OK70 kB
GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
142.250.74.106200 OK86 kB
GET www.google.com/s2/favicons?domain=?v=BUILD_HASH
142.250.74.68404 Not Found0 B
GET image.thum.io/get/width/1200/http://
3.215.74.204404 Not Found0 B
GET code.jquery.com/jquery-3.1.1.min.js
151.101.2.137200 OK87 kB
GET fonts.googleapis.com/css?family=Archivo+Narrow&display=swap
142.250.178.74200 OK1.4 kB
GET cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
104.17.25.14200 OK19 kB
GET kit.fontawesome.com/585b051251.js
172.64.147.188403 Forbidden9 B
GET code.jquery.com/jquery-3.3.1.js
151.101.2.137200 OK272 kB
GET stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
104.18.11.207200 OK51 kB
GET kit.fontawesome.com/585b051251.js
172.64.147.188403 Forbidden9 B
GET ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2
104.21.26.223200 OK78 kB
GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
142.250.74.106200 OK86 kB
GET maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
104.18.11.207200 OK49 kB
GET cdnjs.cloudflare.com/ajax/libs/axios/0.20.0/axios.min.js
104.17.25.14200 OK14 kB
GET www.google.com/s2/favicons?domain=?v=BUILD_HASH
142.250.74.68404 Not Found0 B