Report Overview
Visitedpublic
2026-08-12 13:32:34
Submit Tags
URL
buyghar.com/js/dhl-new.html
Finishing URL
buyghar.com/js/dhl-new.html
IP / ASN
103.73.189.211
Title
DHL | Tracking System
Phishing - Generic phishing
Suspicious - Suspicious Javascript code
Detections
urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
2
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
kit.fontawesome.com | 16651 | 2012-10-18 | 2019-03-29 | 2026-08-10 | 466 B | 470 B |  172.64.147.188 |  |
fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-08-09 | 513 B | 2.0 kB |  142.250.178.74 | |
gcdnb.pbrd.co | 4320607 | 2012-08-15 | 2022-02-21 | 2026-07-31 | 549 B | 735 B | 172.67.198.249 | |
asfasfasfasp.neocities.org | unknown | 2013-05-24 | 2022-07-21 | 2026-05-07 | 549 B | 1.9 kB | 23.143.32.9 | |
mydhlplus.dhl.com | 862984 | 1989-05-25 | 2018-05-02 | 2026-07-31 | 550 B | 3.7 kB |  95.101.11.147 |  |
maxcdn.bootstrapcdn.com | 6807 | 2012-05-25 | 2014-06-18 | 2026-08-10 | 508 B | 146 kB | 104.18.11.207 | |
ajax.googleapis.com | 3691 | 2005-01-25 | 2012-05-22 | 2026-08-10 | 481 B | 87 kB | 142.250.178.106 | |
buyghar.com 7 alert(s) on this Host | unknown | 2008-10-27 | 2025-10-30 | 2025-10-30 | 906 B | 105 kB | 103.73.189.211 |      |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Font Awesome (Font scripts)
Font Awesome is a font and icon toolkit based on CSS and Less.Google Hosted Libraries (CDN)
Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.jQuery:2.2.4 (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.LiteSpeed (Web servers)
LiteSpeed is a high-scalability web server.Bootstrap:4.0.0 (UI frameworks)
Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | buyghar.com/js/dhl-new.html | malware | Detects file containing Telegram Bot API |
| DNS4EU | buyghar.com | malicious | Sinkholed |
Telegram Bot detected (1)
URL
buyghar.com/js/dhl-new.html
IP / ASN
103.73.189.211
Token
7880461023:AAEu1WBLPclytdS8CJeLJEi15N9oa5xoQ1k
Bot Overview
User ID7880461023
Usernamesincoteibot
First Namedonjulio
Last NameN/A
Chat Info
Chat ID5858064231
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs0
JavaScript (2)
No JavaScripts
HTTP Transactions (9)
| URL | IP | Response | Size |
|---|