Report Overview
Visitedpublic
2026-08-20 10:27:43
URL
secure-page-builder--cgruerispanlpa.replit.app/
Finishing URL
secure-page-builder--cgruerispanlpa.replit.app/
IP / ASN
34.117.33.233
#396982 GOOGLE-CLOUD-PLATFORM
Title
Security verification - Microsoft account

Suspicious - Suspicious Javascript code

Detections

urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
6

Host Summary

HostRankRegisteredFirst SeenLast Seen
replit-cdn.com
unknown2025-12-092025-12-252026-08-19
img-prod-cms-rt-microsoft-com.akamaized.net
500042014-03-182017-01-302026-08-15
ipapi.co
79362016-04-192017-01-312026-08-20
www.microsoft.com
8121991-05-022012-05-212026-08-15
secure-page-builder--cgruerispanlpa.replit.app
unknown2021-04-162026-08-202026-08-20
ajax.googleapis.com
36912005-01-252012-05-222026-08-17

Related reports

Threat Detection Systems
Detection SystemIndicatorVerdictAlert
YARAhub by abuse.chsecure-page-builder--cgruerispanlpa.replit.app/malware
Detects file containing Telegram Bot API
YARAhub by abuse.chsecure-page-builder--cgruerispanlpa.replit.app/favicon.icomalware
Detects file containing Telegram Bot API
Cloudflare DNSsecure-page-builder--cgruerispanlpa.replit.appmalicious
Sinkholed
OpenDNSsecure-page-builder--cgruerispanlpa.replit.appphishing
Phishing Block
DNS4EUsecure-page-builder--cgruerispanlpa.replit.appmalicious
Sinkholed
CIRA Canadian Shield DNSsecure-page-builder--cgruerispanlpa.replit.appmalicious
Sinkholed

Telegram Bot detected (1)

URL
secure-page-builder--cgruerispanlpa.replit.app/
IP / ASN
34.117.33.233
#396982 GOOGLE-CLOUD-PLATFORM
Token
8979327593:AAF9v_kKGDw_nnuxaIfkm6xaC6rxkBW07j0
Bot Overview
User ID8979327593
UsernameSUPXXBot
First NameSUP
Last NameN/A
Chat Info
Chat ID8847997420
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs0

JavaScript (3)

HTTP Transactions (7)

URLIPResponseSize