Report Overview
Visitedpublic
2026-09-04 15:57:04
Submit Tags
URL
obw3sixfive.cc/revali/click.html
Finishing URL
obw3sixfive.cc/revali/click.html
IP / ASN
104.21.19.199
Title
PORTAL - example.com Mail Authentication
Phishing - Known Phishing Kit detected
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
2
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| 1742320 | 2016-02-04 | 2017-02-03 | 2026-08-28 | 569 B | 45 kB |  34.231.72.82 | ||
| 1222 | 2009-02-17 | 2012-05-23 | 2026-08-30 | 1.8 kB | 365 kB | 104.17.25.14 |  | |
obw3sixfive.cc 6 alert(s) on this Host | unknown | 2026-08-29 | 2026-09-04 | 2026-09-04 | 1.0 kB | 23 kB | 172.67.188.153 | |
| 7936 | 2016-04-19 | 2017-01-31 | 2026-09-03 | 454 B | 2.5 kB | 104.26.8.44 | | |
| unknown | 2008-02-11 | 2013-05-06 | 2026-09-04 | 590 B | 1.0 kB | 142.250.178.100 |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | obw3sixfive.cc/revali/click.html | malware | Detects file containing Telegram Bot API |
| OpenDNS | obw3sixfive.cc | phishing | Phishing Block |
Telegram Bot detected (1)
URL
obw3sixfive.cc/revali/click.html
IP / ASN
172.67.188.153
Token
8721809540:AAEB5JYTNGhwsp1jNKwbl62cYLsMpg8ZhHw
Bot Overview
User ID8721809540
Usernamenewstorylynxxbot
First Namenewstory
Last NameN/A
Chat Info
Chat ID8590536591
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs0
JavaScript (1)
No JavaScripts
HTTP Transactions (8)
| URL | IP | Response | Size |
|---|