Report Overview
Visitedpublic
2025-10-23 13:28:03
Submit Tags
URL
casefb047002-2oqi.vercel.app/?naps
Finishing URL
casefb047002-2oqi.vercel.app/submit-application.html
IP / ASN
64.29.17.131
Title
Loading
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
1
Threat Detection Systems
3
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
ipinfo.io | 1327 | 2013-04-23 | 2013-12-16 | 2025-10-20 | 457 B | 650 B | 34.117.59.81 |   |
www.googletagmanager.com | 283 | 2011-11-11 | 2012-10-04 | 2025-10-19 | 449 B | 428 kB | 142.250.74.168 | |
cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2025-10-19 | 481 B | 26 kB |  104.17.25.14 |  |
casefb047002-2oqi.vercel.app 73 alert(s) on this Host | unknown | 2020-01-28 | 2025-10-23 | 2025-10-23 | 22 kB | 1.3 MB | 216.198.79.67 |         |
ajax.googleapis.com | 3691 | 2005-01-25 | 2012-05-22 | 2025-10-19 | 1.9 kB | 280 kB | 142.250.178.106 | |
cdn.jsdelivr.net | 1678 | 2012-05-16 | 2012-09-30 | 2025-10-19 | 469 B | 80 kB | 104.16.175.226 | |
Google Cloud CDN (CDN)
Cloud CDN uses Google's global edge network to serve content closer to users.Google Cloud (IaaS)
Google Cloud is a suite of cloud computing services.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Vercel (PaaS)
Vercel is a cloud platform for static frontends and serverless functions.Google Analytics (Analytics)
Google Analytics is a free web analytics service that tracks and reports website traffic.Bootstrap:5.0.2 (UI frameworks)
Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.jsDelivr (CDN)
JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.Google Hosted Libraries (CDN)
Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.jQuery:3.6.0 (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.AngularJS (JavaScript frameworks)
AngularJS is a JavaScript-based open-source web application framework led by the Angular Team at Google.cdnjs (CDN)
cdnjs is a free distributed JS library delivery service.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium | 172.18.0.2 | 34.117.59.81 | ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | casefb047002-2oqi.vercel.app/js/landing/telegram.js | malware | Detects file containing Telegram Bot API |
| OpenDNS | casefb047002-2oqi.vercel.app | phishing | Phishing Block |
| DNS0 Zero | casefb047002-2oqi.vercel.app | malicious | Sinkholed |
Telegram Bot detected (1)
URL
casefb047002-2oqi.vercel.app/js/landing/telegram.js
IP / ASN
216.198.79.67
Token
8399959797:AAHxkjJLJS3sJxNHIUeTEiXbLjVHyKIaHjk
Bot Overview
User ID8399959797
Usernamenew_data_global_bot
First Namenew_data_globalbot
Last NameN/A
Chat Info
Chat ID-1003065986040
Chat Typesupergroup
Title83几卂ㄒ尺卂_几卂́ㄖ_卄卂̉丨86
User Count4
Admins2
Pending Msgs1
JavaScript (22)
No JavaScripts
HTTP Transactions (45)
| URL | IP | Response | Size |
|---|