Report Overview
Visitedpublic
2026-07-31 12:26:06
Submit Tags
URL
metanet-auth.office.jekklim.org/metanet
Finishing URL
metanet-auth.office.jekklim.org/metanet/
IP / ASN
91.149.243.63
Title
Bezahlung — METANET
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
4
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
fonts.gstatic.com | unknown | 2008-02-11 | 2014-04-02 | 2026-07-26 | 2.4 kB | 197 kB |  142.250.178.99 | |
metanet-auth.office.jekklim.org 266 alert(s) on this Host | unknown | 2026-07-21 | 2026-07-31 | 2026-07-31 | 47 kB | 124 kB | 91.149.243.63 |  |
fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-07-26 | 551 B | 13 kB | 142.250.178.106 |
Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | metanet-auth.office.jekklim.org/metanet/js/script.js?v=2 | malware | Detects file containing Telegram Bot API |
| OpenDNS | metanet-auth.office.jekklim.org | phishing | Phishing Block |
| Quad9 DNS | metanet-auth.office.jekklim.org | malicious | Sinkholed |
| DNS4EU | metanet-auth.office.jekklim.org | malicious | Sinkholed |
Telegram Bot detected (1)
URL
metanet-auth.office.jekklim.org/metanet/js/script.js?v=2
IP / ASN
91.149.243.63
Token
8891337159:AAFohIt-VnzAlsh8zOrpXODCIJYfqCbWNbQ
Bot Overview
User ID8891337159
Usernamemetanetx0_bot
First Namemetanet
Last NameN/A
Chat Info
Chat IDN/A
Chat TypeN/A
TitleN/A
User Count0
Admins0
Pending Msgs0
JavaScript (1)
No JavaScripts
HTTP Transactions (93)
| URL | IP | Response | Size |
|---|