urlquery Suspicious - Suspicious Javascript code
VerdictSuspicious
Severitymedium
Triggered on HTTP #23
WEBSITE ANALYSIS REPORT
http://r.gettrustpayment.live
public
Suspicious activity
Review evidence →5 detections · review the detection signals
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
2urlquery Suspicious - Suspicious Javascript code
VerdictSuspicious
Severitymedium
Triggered on HTTP #23
Threat Detection Systems
1YARAhub by abuse.ch Detects file containing Telegram Bot API
Verdictmalware
Severitymedium
Matched indicatorr.gettrustpayment.live/scripts/main.js
IDS
2Suricata IDS ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)
VerdictVerdict not recorded
Severitylow
Suricata /w Emerging Threats Pro
Triggered on Report-level
Suricata IDS ET INFO Observed Smart Chain Domain in TLS SNI (rpc .ankr .com)
VerdictVerdict not recorded
Severitylow
Suricata /w Emerging Threats Pro
Triggered on Report-level