Report Overview
Visitedpublic
2026-02-06 03:31:55
URL
sterlhorizonltd.com/au/
Finishing URL
sterlhorizonltd.com/au/?recovery_phrase=
IP / ASN
213.165.249.109
#22611 INMOTION
Title
MetaMask

Suspicious - Suspicious Javascript code

Detections

urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
2

Host Summary

HostRankRegisteredFirst SeenLast Seen
ipapi.co
79362016-04-192017-01-312026-02-04
sterlhorizonltd.com
unknown2025-07-122025-08-122026-02-06
raw.githubusercontent.com
220212014-02-062014-03-012026-02-04
raffleslearning.com
unknown2020-07-222026-02-032026-02-03

Related reports

Threat Detection Systems
Detection SystemIndicatorVerdictAlert
YARAhub by abuse.chsterlhorizonltd.com/au/?recovery_phrase=malware
Detects file containing Telegram Bot API
YARAhub by abuse.chsterlhorizonltd.com/au/malware
Detects file containing Telegram Bot API

Telegram Bot detected (2)

URL
sterlhorizonltd.com/au/?recovery_phrase=
IP / ASN
213.165.249.109
#22611 INMOTION
Token
8514531060:AAGyzy7MfhxhtmbI_WB1we1NwRhgr5DCKOA
Bot Overview
User ID8514531060
UsernameFreshamandyBot
First NameFreshamandy
Last NameN/A
Chat Info
Chat ID5582793263
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs0
URL
sterlhorizonltd.com/au/
IP / ASN
213.165.249.109
#22611 INMOTION
Token
8514531060:AAGyzy7MfhxhtmbI_WB1we1NwRhgr5DCKOA
Bot Overview
User ID8514531060
UsernameFreshamandyBot
First NameFreshamandy
Last NameN/A
Chat Info
Chat ID5582793263
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs0

JavaScript (6)

HTTP Transactions (33)

URLIPResponseSize