urlquery.net
Investigate/Report/3464c84d-e6ad-4892-8cbd-b505b128da1c
WEBSITE ANALYSIS REPORT

https://www.nagadiya-auditors.com/ee/

public
Report tags
adobe phishing suspicious telegram_bot
Submit tags
Request review
Phishing detected

6 detections · review the detection signals

Review evidence →

Artifacts

Extracted files, shortcuts, Telegram observations, PDF documents, and clipboard content

Files1Telegram2

Extracted files

1
FILE

File #01

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

URL

HTTPS
https://cleaningbyme.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest&c=new&c=&c=&c=&c=&c=&c=&c=

IP / ASN

United States 15.204.109.3

AS16276 · OVH SAS

Resource information

File type
PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections
Size
19.82 MB (20779064 bytes)
MD5
b69ffde36abfb0bb88d87c9c16261dc9
SHA1
1715def1996e7b07487c89591ae8a3e450443151
SHA256
fa4a18c7c6409301accfbaa88ca5d5b9de57655346e80b01be14ae91673e4635

Telegram observations

2
TELEGRAM TOKEN

Telegram token #01

Token not recorded as revoked

URL

HTTPS
https://www.nagadiya-auditors.com/ee/

IP / ASN

United States 199.79.63.117

AS46606 · UNIFIEDLAYER-AS-1

Resource information

File type
Size
22.1 KB (22657 bytes)
MD5
76e232352c405d5dc670cca1b182edb2
SHA1
172efdf5054ee669a4ba44e39f55c459b1cc5d6e
SHA256
ffc935734d7687731b6ed4caab715757ef22b6fdbd058227a76b8dda2b6aac00

Token observation

Token
8620954408:AAG4cdk-9vZp_C_Akwc1AEmP8o_QjhM0Zgs
Revoked
false

Bot identity

Bot token
8620954408:AAG4cdk-9vZp_C_Akwc1AEmP8o_QjhM0Zgs
User ID
8620954408
Username
viruzeffectbot
First name
virus
Last name
Pending messages
0

Chat

Chat ID
7307455520
Title
Type
private
Bot role
member
Total users
2
TELEGRAM TOKEN

Telegram token #02

Token not recorded as revoked

URL

ABOUT
about://about:srcdoc#215

IP / ASN

Country unknown 0.0.0.0

Unknown

Resource information

File type
Size
22.6 KB (23187 bytes)
MD5
d0075718300f9fbeba642b8177237e18
SHA1
14c5c80f6828706ccce3e9eeff255a822536338a
SHA256
ed8aafed410e9fcbf0e75946771d664d5def0ea35dac29c8c7333a938c23b4d2

Token observation

Token
8620954408:AAG4cdk-9vZp_C_Akwc1AEmP8o_QjhM0Zgs
Revoked
false

Bot identity

Bot token
8620954408:AAG4cdk-9vZp_C_Akwc1AEmP8o_QjhM0Zgs
User ID
8620954408
Username
viruzeffectbot
First name
virus
Last name
Pending messages
0

Chat

Chat ID
7307455520
Title
Type
private
Bot role
member
Total users
2
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot