Report Overview
Visitedpublic
2026-04-15 18:16:33
URL
elazigyapilab.com/zmncbvcwsdkmnmlkjh/bzqq.html?eta=
Finishing URL
elazigyapilab.com/zmncbvcwsdkmnmlkjh/bzqq.html?eta=
IP / ASN
84.247.20.203
#214823 Doruk Hosting Ve Bilisim Teknolojileri A.s.
Title
Sign In.

Suspicious - Suspicious Javascript code

Detections

urlquery
2
Network Intrusion Detection
1
Threat Detection Systems
3

Host Summary

HostRankRegisteredFirst SeenLast Seen
api.ipify.org
81662014-01-052014-10-062026-04-13
fonts.googleapis.com
3132005-01-252012-05-232026-04-12
fonts.gstatic.com
unknown2008-02-112014-04-022026-04-12
cdn.jsdelivr.net
16782012-05-162012-09-302026-04-12
www.google.com
221997-09-152015-05-102026-04-12
elazigyapilab.com
unknown2020-01-242026-03-312026-03-31
t2.gstatic.com
unknown2008-02-112013-05-072026-04-09

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
lowClient IP
104.26.13.205
ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI
Threat Detection Systems
Detection SystemIndicatorVerdictAlert
YARAhub by abuse.chelazigyapilab.com/zmncbvcwsdkmnmlkjh/bzqq.html?eta=malware
Detects file containing Telegram Bot API
DNS4EUelazigyapilab.commalicious
Sinkholed
Quad9 DNSelazigyapilab.commalicious
Sinkholed

Telegram Bot detected (1)

URL
elazigyapilab.com/zmncbvcwsdkmnmlkjh/bzqq.html?eta=
IP / ASN
84.247.20.203
#214823 Doruk Hosting Ve Bilisim Teknolojileri A.s.
Token
7893984382:AAGQ5UZ6XF-45t7ubOLmjH8KOen9FoZ89oY
Bot Overview
User ID7893984382
UsernameAdamu147_bot
First NameØffsetDinerø_bot
Last NameN/A
Chat Info
Chat ID6941085151
Chat Typeprivate
TitleN/A
User Count2
Admins0
Pending Msgs1

JavaScript (4)

HTTP Transactions (12)

URLIPResponseSize