Report Overview
Visitedpublic
2026-08-04 16:36:54
URL
9000-firebase-jin-1781591798124.cluster-fsmcisrvfbb5cr5mvra3hr3qyg.cloudworkstations.dev/?monospaceUid=483725
Finishing URL
9000-firebase-jin-1781591798124.cluster-fsmcisrvfbb5cr5mvra3hr3qyg.cloudworkstations.dev/?monospaceUid=483725
IP / ASN
34.98.124.135
#396982 GOOGLE-CLOUD-PLATFORM
Title
Mail

Phishing - Generic phishing

Suspicious - Suspicious Javascript code

Detections

urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
3

Host Summary

HostRankRegisteredFirst SeenLast Seen
9000-firebase-jin-1781591798124.cluster-fsmcisrvfbb5cr5mvra3hr3qyg.cloudworkstations.dev
unknown2022-01-142026-08-042026-08-04

Related reports

Threat Detection Systems
Detection SystemIndicatorVerdictAlert
YARAhub by abuse.ch9000-firebase-jin-1781591798124.cluster-fsmcisrvfbb5cr5mvra3hr3qyg.cloudworkstations.dev/?monospaceUid=483725malware
Detects file containing Telegram Bot API
OpenDNS9000-firebase-jin-1781591798124.cluster-fsmcisrvfbb5cr5mvra3hr3qyg.cloudworkstations.devphishing
Phishing Block
DNS4EU9000-firebase-jin-1781591798124.cluster-fsmcisrvfbb5cr5mvra3hr3qyg.cloudworkstations.devmalicious
Sinkholed

Telegram Bot detected (1)

URL
9000-firebase-jin-1781591798124.cluster-fsmcisrvfbb5cr5mvra3hr3qyg.cloudworkstations.dev/?monospaceUid=483725
IP / ASN
34.98.124.135
#396982 GOOGLE-CLOUD-PLATFORM
Token
8177661721:AAEic3pteGDLSGR6FffQ2VJoA8rOTt-x4c4
Bot Overview
User ID8177661721
UsernameBTTS5000bot
First NameBTTS5000
Last NameN/A
Chat Info
Chat ID6766171502
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs0

JavaScript (1)

HTTP Transactions (2)

URLIPResponseSize