Report Overview

  1. Visited public
    2025-05-29 10:16:41
    Submit Tags
  2. URL

    nowlifestyle.com/redir.php?k=9a4e080456dabe5eebc8863cde7b1b48&url=https://nowlifestyle.com/redir.php?k=9a4e080456dabe5eebc8863cde7b1b48&url=https://nowlifestyle.com/redir.php?k=9a4e080456dabe5eebc8863cde7b1b48&url=https://zofvi.click/wp-contents/Webmail_login.html

  3. Finishing URL

    zofvi.click/wp-contents/Webmail_login.html

  4. IP / ASN
    97.79.238.13

    #46549 GVO

    Title
    zofvi.click/wp-contents/Webmail_login.html
  5. Phishing - Generic phishing

    Suspicious - Suspicious Javascript code

Detections
urlquery
9
Network Intrusion Detection
1
Threat Detection Systems
1

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ka-f.fontawesome.com35982012-10-182019-12-172025-05-23
maxcdn.bootstrapcdn.com7242012-05-252014-06-182025-05-28
kit.fontawesome.com18682012-10-182019-03-292025-05-28
stackpath.bootstrapcdn.com24672012-05-252018-04-052025-05-28
www.google.com71997-09-152015-05-102025-05-28
nowlifestyle.com736822005-11-022017-02-012025-05-23
cdnjs.cloudflare.com2352009-02-172012-05-232025-05-28
ajax.googleapis.com129052005-01-252012-05-222025-05-28
zofvi.clickunknown2025-04-042025-05-282025-05-28
code.jquery.com6342005-12-102012-05-212025-05-28
fonts.googleapis.com88772005-01-252012-05-232025-05-28
image.thum.io2827252016-02-042017-02-032025-05-25

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IP 54.90.58.138

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumjavascript.write.md5:2202da89fe14eadf4dff6fa012e53825Detects file containing Telegram Bot API

OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Telegram Bot detected

  1. URL

    zofvi.click/wp-contents/Webmail_login.html

  2. IP / ASN
    185.221.216.117

    #393960 HOST4GEEKS-LLC

  1. Token

    7710347151:AAGXNig3VYb7N92OI6Ez1gA9Z2wrTaE1mgk

  1. Bot Overview

    User ID 7710347151
    Username BillybuggyBot
    First Name BuggyBill
    Last Name
  2. Chat Information

    Chat ID 7855967204
    Chat Type private
    Title
    User Count 2
    Admins 0
    Pending Messages 0
  1. Token

    7710347151:AAGXNig3VYb7N92OI6Ez1gA9Z2wrTaE1mgk

  1. Bot Overview

    User ID 7710347151
    Username BillybuggyBot
    First Name BuggyBill
    Last Name
  2. Chat Information

    Chat ID 7855967204
    Chat Type private
    Title
    User Count 2
    Admins 0
    Pending Messages 0

JavaScript (13)

HTTP Transactions (18)

URLIPResponseSize
GET nowlifestyle.com/redir.php?k=9a4e080456dabe5eebc8863cde7b1b48&url=https://nowlifestyle.com/redir.php?k=9a4e080456dabe5eebc8863cde7b1b48&url=https://nowlifestyle.com/redir.php?k=9a4e080456dabe5eebc8863cde7b1b48&url=https://zofvi.click/wp-contents/Webmail_login.html
97.79.238.13302 Found1.0 MB
GET cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
104.17.25.14200 OK19 kB
GET ka-f.fontawesome.com/releases/v5.15.4/webfonts/free-fa-solid-900.woff2
104.21.26.223200 OK78 kB
GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
142.250.178.74200 OK86 kB
GET maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
104.18.10.207200 OK49 kB
GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
142.250.178.74200 OK86 kB
GET zofvi.click/wp-contents/Webmail_login.html
185.221.216.117200 OK1.0 MB
GET code.jquery.com/jquery-3.2.1.slim.min.js
151.101.194.137200 OK70 kB
GET fonts.googleapis.com/css?family=Archivo+Narrow&display=swap
142.250.178.106200 OK1.4 kB
GET kit.fontawesome.com/585b051251.js
104.18.40.68403 Forbidden9 B
GET stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
104.18.11.207200 OK51 kB
GET cdnjs.cloudflare.com/ajax/libs/axios/0.20.0/axios.min.js
104.17.25.14200 OK14 kB
GET kit.fontawesome.com/585b051251.js
104.18.40.68403 Forbidden9 B
GET www.google.com/s2/favicons?domain=?v=BUILD_HASH
142.250.178.100404 Not Found0 B
GET www.google.com/s2/favicons?domain=?v=BUILD_HASH
142.250.178.100404 Not Found0 B
GET code.jquery.com/jquery-3.1.1.min.js
151.101.194.137200 OK87 kB
GET code.jquery.com/jquery-3.3.1.js
151.101.194.137200 OK272 kB
GET image.thum.io/get/width/1200/http://
54.90.58.138404 Not Found0 B