Report Overview
Visitedpublic
2026-09-01 17:28:21
URL
stardustottawa.com/ok/aldom.html
Finishing URL
stardustottawa.com/ok/aldom.html
IP / ASN
199.204.212.27
#16583 CFCS
Title
Webmail Portal Access

Phishing - Generic phishing

Suspicious - Suspicious Javascript code

Detections

urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
1

Host Summary

HostRankRegisteredFirst SeenLast Seen
12222009-02-172012-05-232026-08-30
2295502002-05-052017-06-012026-08-31
stardustottawa.com
unknownunknown2026-09-012026-09-01
16782012-05-162012-09-302026-08-30

Related reports

Threat Detection Systems
Detection SystemIndicatorVerdictAlert
YARAhub by abuse.chstardustottawa.com/ok/aldom.htmlmalware
Detects file containing Telegram Bot API

Telegram Bot detected (1)

URL
stardustottawa.com/ok/aldom.html
IP / ASN
199.204.212.27
#16583 CFCS
Token
8864735787:AAEK_bnDk1d0dDCmLZkCLf2XG4Awr1aQN0U
Bot Overview
User ID8864735787
UsernamePoskyy_bot
First NamePosky_bot
Last NameN/A
Chat Info
Chat ID6388079784
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs0

JavaScript (1)

HTTP Transactions (6)

URLIPResponseSize