Report Overview
Visitedpublic
2026-09-11 17:11:49
Submit Tags
URL
nl2.hypervpn.cc/signin/login.html
Finishing URL
nl2.hypervpn.cc/signin/login.html
IP / ASN
107.189.18.119
Title
EasyWeb Login - TD Canada Trust
Suspicious - Suspicious Javascript code
Detections
urlquery
1
Network Intrusion Detection
0
Threat Detection Systems
3
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
nl2.hypervpn.cc 15 alert(s) on this Host | unknown | 2025-12-21 | 2026-09-11 | 2026-09-11 | 2.7 kB | 1.3 MB | 107.189.18.119 |   |
Apache HTTP Server:2.4.58 (Web servers)
Apache is a free and open-source cross-platform web server software.Ubuntu (Operating systems)
Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | nl2.hypervpn.cc/signin/login.html | malware | Detects file containing Telegram Bot API |
| OpenDNS | nl2.hypervpn.cc | phishing | Phishing Block |
| DNS4EU | nl2.hypervpn.cc | malicious | Sinkholed |
Telegram Bot detected (1)
URL
nl2.hypervpn.cc/signin/login.html
IP / ASN
107.189.18.119
Token
8137455134:AAH7b_9P1lg8t2S5jTmhA_0rUEmiqXmeA8E
Bot Overview
User ID8137455134
UsernameNouchijuggbot
First NameKEYK
Last NameN/A
Chat Info
Chat ID7794344075
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs1
JavaScript (1)
No JavaScripts
HTTP Transactions (6)
| URL | IP | Response | Size |
|---|