Report Overview
Visitedpublic
2026-08-04 14:22:55
Submit Tags
URL
credit-agricole-filtre-exagone.iceiy.com/
Finishing URL
credit-agricole-filtre-exagone.iceiy.com/pages/index.php
IP / ASN
185.27.134.205
Title
Accès à votre caisse régionale - Crédit Agricole
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
5
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
credit-agricole-filtre-exagone.iceiy.com 190 alert(s) on this Host | unknown | 2020-12-06 | 2026-08-04 | 2026-08-04 | 25 kB | 3.3 MB | 185.27.134.205 |      |
aeonfree.com | 1525157 | 2019-06-03 | 2019-06-07 | 2026-08-04 | 14 kB | 18 kB |  104.21.49.108 |   |
OpenResty (Web servers)
OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Java (Programming languages)
Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.jQuery (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.Adobe Experience Manager (CMS)
Adobe Experience Manager (AEM) is a content management solution for building websites, mobile apps and forms.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Netlify (PaaS, CDN)
Netlify providers hosting and server-less backend services for web applications and static websites.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | credit-agricole-filtre-exagone.iceiy.com/js/cgwebprox.js | malware | Detects file containing Telegram Bot API |
| Cloudflare DNS | credit-agricole-filtre-exagone.iceiy.com | malicious | Sinkholed |
| DNS4EU | credit-agricole-filtre-exagone.iceiy.com | malicious | Sinkholed |
| Quad9 DNS | credit-agricole-filtre-exagone.iceiy.com | malicious | Sinkholed |
| OpenDNS | credit-agricole-filtre-exagone.iceiy.com | phishing | Phishing Block |
Telegram Bot detected (1)
URL
credit-agricole-filtre-exagone.iceiy.com/js/cgwebprox.js
IP / ASN
185.27.134.205
Token
8761552731:AAG56TaZjuk8bzewloRTx4kxkvn-kxCee3I
Bot Overview
User ID8761552731
UsernameNextGenVision90_bot
First NameAGRÉGATION
Last NameN/A
Chat Info
Chat IDN/A
Chat TypeN/A
TitleN/A
User Count0
Admins0
Pending Msgs1
JavaScript (8)
No JavaScripts
HTTP Transactions (74)
| URL | IP | Response | Size |
|---|