Report Overview
Visitedpublic
2026-06-12 09:07:09
URL
madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html
Finishing URL
madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html
IP / ASN
185.145.113.132
#199524 G-Core Labs S.A.
Title
View Secure Document - Sign in

Phishing - Generic phishing

Suspicious - Suspicious Javascript code

Phishing - Known Phishing Kit detected

Detections

urlquery
4
Network Intrusion Detection
0
Threat Detection Systems
3

Host Summary

HostRankRegisteredFirst SeenLast Seen
madeforthis.s-ed1.cloud.gcore.lu
unknownunknown2026-06-122026-06-12
ajax.googleapis.com
36912005-01-252012-05-222026-06-08
code.jquery.com
49152005-12-102012-05-212026-06-07
stackpath.bootstrapcdn.com
219702012-05-252018-04-052026-06-08
i.ibb.co
216432010-07-202018-11-252026-06-11

Related reports

Threat Detection Systems
Detection SystemIndicatorVerdictAlert
YARAhub by abuse.chmadeforthis.s-ed1.cloud.gcore.lu/xls/review-file.htmlmalware
Detects file containing Telegram Bot API
Hagezi Threat Feedmadeforthis.s-ed1.cloud.gcore.lumalicious
Sinkholed
DNS4EUmadeforthis.s-ed1.cloud.gcore.lumalicious
Sinkholed

Telegram Bot detected (1)

URL
madeforthis.s-ed1.cloud.gcore.lu/xls/review-file.html
IP / ASN
185.145.113.133
#199524 G-Core Labs S.A.
Token
8102484756:AAGHBoKBWFOwhSZA-O48KaRC3L0SJBgPKgI
Bot Overview
User ID8102484756
Usernamebx007_bot
First Nameresult.bx
Last NameN/A
Chat Info
Chat ID1236418683
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs1

JavaScript (55)

HTTP Transactions (7)

URLIPResponseSize