urlquery Suspicious - Suspicious Javascript code
VerdictSuspicious
Severitymedium
Triggered on HTTP #2
WEBSITE ANALYSIS REPORT
https://corfran.com.mx/excel/WebLogin.html?eta=dues.zion@hotmail.com
public
Suspicious activity
Review evidence →3 detections · review the detection signals
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
1Threat Detection Systems
2YARAhub by abuse.ch Detects file containing Telegram Bot API
Verdictmalware
Severitymedium
Matched indicatorcorfran.com.mx/excel/WebLogin.html?eta=dues.zion@hotmail.com
DNS4EU Sinkholed
VerdictMalicious
Severitymedium