Report Overview

  1. Visited public
    2025-06-24 09:17:15
  2. URL

    cpanel-qm5g.4everland.app/updated.html

  3. Finishing URL

    cpanel-qm5g.4everland.app/updated.html

  4. IP / ASN
    104.21.7.158

    #13335 CLOUDFLARENET

    Title
    Mail :: Inbox
  5. Phishing - Generic phishing

    Suspicious - Suspicious Javascript code

Detections
urlquery
6
Network Intrusion Detection
1
Threat Detection Systems
11

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
www.scnsoft.com7447852000-12-082012-08-212025-06-20
api.ipify.org32672014-01-052014-10-062025-06-18
kit.fontawesome.com18682012-10-182019-03-292025-06-18
cpanel-qm5g.4everland.appunknown2021-07-082025-06-242025-06-24
ajax.googleapis.com129052005-01-252012-05-222025-06-18
stackpath.bootstrapcdn.com24672012-05-252018-04-052025-06-18
res.cloudinary.com25202011-05-242012-10-032025-06-19
fonts.googleapis.com88772005-01-252012-05-232025-06-18
code.jquery.com6342005-12-102012-05-212025-06-18
cdnjs.cloudflare.com2352009-02-172012-05-232025-06-18
res.cloudinary.comteunknownunknown2025-06-142025-06-14
maxcdn.bootstrapcdn.com7242012-05-252014-06-182025-06-18

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IP 172.67.74.152

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumcpanel-qm5g.4everland.app/updated.htmlDetects file containing Telegram Bot API
mediumjavascript.script.md5:ad9bdeedd20e1f9a001b40a242ed9356Detects file containing Telegram Bot API

OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumres.cloudinary.comteSinkholed
medium4everland.appSinkholed
medium4everland.appSinkholed
medium4everland.appSinkholed

ThreatFox

No alerts detected


Telegram Bot detected

  1. URL

    cpanel-qm5g.4everland.app/updated.html

  2. IP / ASN
    172.67.136.240

    #13335 CLOUDFLARENET

  1. Token

    8186740486:AAFiHw5ikZqAyN-atiQU2SnLXZP3OyCUK2A

  1. Bot Overview

    User ID 8186740486
    Username serverlikkk_bot
    First Name serverlinkkbot
    Last Name
  2. Chat Information

    Chat ID 2073334189
    Chat Type private
    Title
    User Count 2
    Admins 0
    Pending Messages 0

JavaScript (10)

HTTP Transactions (17)

URLIPResponseSize
GET code.jquery.com/jquery-3.2.1.slim.min.js
151.101.2.137200 OK70 kB
GET cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
104.17.24.14200 OK19 kB
GET api.ipify.org/?format=json
172.67.74.152200 OK21 B
GET kit.fontawesome.com/585b051251.js
104.18.40.68403 Forbidden9 B
GET res.cloudinary.comte/ducjuygen/image/upload/v1662463656/download_2_gcagnl.jpg
0.0.0.0 0 B
GET cpanel-qm5g.4everland.app/favicon.ico
172.67.136.240404 Not Found191 B
GET maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
104.18.11.207200 OK49 kB
GET ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
142.250.74.10200 OK86 kB
GET ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js
142.250.74.10200 OK87 kB
GET stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
104.18.11.207200 OK51 kB
GET res.cloudinary.com/ducjuygen/image/upload/v1662462897/weblogo_fs2day.png
104.16.79.6401 Unauthorized0 B
GET cpanel-qm5g.4everland.app/css/landing.css
172.67.136.240404 Not Found0 B
GET fonts.googleapis.com/css?family=Archivo+Narrow&display=swap
142.250.74.10200 OK1.4 kB
GET maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
104.18.11.207200 OK145 kB
GET www.scnsoft.com/blog-pictures/sharepoint/office_365_security-01_1.png
172.67.43.56200 OK14 kB
GET res.cloudinary.com/ducjuygen/image/upload/v1662462897/weblogo_fs2day.png
104.16.79.6401 Unauthorized0 B
GET cpanel-qm5g.4everland.app/updated.html
172.67.136.240200 OK17 kB