Report Overview
Visitedpublic
2026-02-06 03:31:55
Submit Tags
URL
sterlhorizonltd.com/au/
Finishing URL
sterlhorizonltd.com/au/?recovery_phrase=
IP / ASN

213.165.249.109
Title
MetaMask
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
2
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
ipapi.co | 7936 | 2016-04-19 | 2017-01-31 | 2026-02-04 | 3.5 kB | 6.3 kB | ![]() 104.26.8.44 | |
sterlhorizonltd.com 9 alert(s) on this Host | unknown | 2025-07-12 | 2025-08-12 | 2026-02-06 | 5.0 kB | 13 MB | ![]() 213.165.249.109 | |
raw.githubusercontent.com | 22021 | 2014-02-06 | 2014-03-01 | 2026-02-04 | 3.9 kB | 112 kB | ![]() 185.199.110.133 | |
raffleslearning.com | unknown | 2020-07-22 | 2026-02-03 | 2026-02-03 | 3.9 kB | 26 kB | ![]() 52.76.211.207 |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Apache HTTP Server (Web servers)
Apache is a free and open-source cross-platform web server software.GitHub Pages (PaaS)
GitHub Pages is a static site hosting service.Varnish (Caching)
Varnish is a reverse caching proxy.Fastly (CDN)
Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video & streaming services.Ubuntu (Operating systems)
Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.Apache HTTP Server:2.4.52 (Web servers)
Apache is a free and open-source cross-platform web server software.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | sterlhorizonltd.com/au/?recovery_phrase= | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | sterlhorizonltd.com/au/ | malware | Detects file containing Telegram Bot API |
Telegram Bot detected (2)
URL
sterlhorizonltd.com/au/?recovery_phrase=
IP / ASN

213.165.249.109
Token
8514531060:AAGyzy7MfhxhtmbI_WB1we1NwRhgr5DCKOA
Bot Overview
User ID8514531060
UsernameFreshamandyBot
First NameFreshamandy
Last NameN/A
Chat Info
Chat ID5582793263
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs0
URL
sterlhorizonltd.com/au/
IP / ASN

213.165.249.109
Token
8514531060:AAGyzy7MfhxhtmbI_WB1we1NwRhgr5DCKOA
Bot Overview
User ID8514531060
UsernameFreshamandyBot
First NameFreshamandy
Last NameN/A
Chat Info
Chat ID5582793263
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs0
JavaScript (6)
No JavaScripts
HTTP Transactions (33)
| URL | IP | Response | Size |
|---|

