Report Overview
Visitedpublic
2026-09-09 18:36:19
URL
insourcehealthcare.com/.well-known/wildtrns/index.html
Finishing URL
insourcehealthcare.com/.well-known/wildtrns/index.html
IP / ASN
192.185.168.24
#31898 Oracle Corporation
Title
WeTransfer

Phishing - WeTransfer

Suspicious - Suspicious Javascript code

Detections

urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
2

Host Summary

HostRankRegisteredFirst SeenLast Seen
insourcehealthcare.com
unknownunknown2026-09-092026-09-09
219702012-05-252018-04-052026-09-07
10932016-01-062016-01-072026-09-07
12222009-02-172012-05-232026-09-06
68072012-05-252014-06-182026-09-07
36912005-01-252012-05-222026-09-07

Related reports

Threat Detection Systems
Detection SystemIndicatorVerdictAlert
YARAhub by abuse.chinsourcehealthcare.com/.well-known/wildtrns/index.htmlmalware
Detects file containing Telegram Bot API
DNS4EUinsourcehealthcare.commalicious
Sinkholed

Telegram Bot detected (1)

URL
insourcehealthcare.com/.well-known/wildtrns/index.html
IP / ASN
192.185.168.24
#19871 NETWORK-SOLUTIONS-HOSTING
Token
8509386436:AAEgiELuCXunuFRcYxq5PGt6itwkoJ-PWRM
Bot Overview
User ID8509386436
UsernameALLWETRANSLOGSSEP_bot
First NameALLWETRANSLOGSSEP
Last NameN/A
Chat Info
Chat ID5752969341
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs0

JavaScript (7)

HTTP Transactions (7)

URLIPResponseSize