urlquery.net
WEBSITE ANALYSIS REPORT

http://salviidraulico.it/wp-includes/theme-compat/shwpebc/ksgxuvc/povrusy/phpaccess.html?eta%5C=ravik@8051e9cdaa76203a8c222e3257119824db9f.net

public
Submit tags
Request review
Suspicious activity

5 detections · review the detection signals

Review evidence →

JavaScript

Recorded scripts and browser console observations

3 scripts
Observed scripts. Expand a row for metadata, detections, and available captured source.
#URL / sourceIntroduced bySizeFirst seen
1scriptElement78.5 KB
2scriptElement3.3 KB

Script #02

Recorded metadata

URL

Inline https
https://salviidraulico.it/wp-includes/theme-compat/shwpebc/ksgxuvc/povrusy/phpaccess.html?eta%5C=ravik@8051e9cdaa76203a8c222e3257119824db9f.net

IP / ASN

Italy 45.143.182.43

AS208337 · Telemanapoli S.r.l.

Detections

Detections attached to this script.
DetectionSeverityVerdict
YARAhub by abuse.ch Detects file containing Telegram Bot APImediummalware

Source

Loading captured source…

3scriptElement1.5 KB

Console observations

Browser messages in recorded order

2 messages
Browser console observations in recorded order.
#LevelMessageRecorded source
1WARN
No 'eta' parameter found in the URL.
https://salviidraulico.it/wp-includes/theme-compat/shwpebc/ksgxuvc/povrusy/phpaccess.html?eta%5C=ravik@8051e9cdaa76203a8c222e3257119824db9f.net Line 140 · Column 17
2ERROR
Error fetching IP address:NetworkError when attempting to fetch resource.
https://salviidraulico.it/wp-includes/theme-compat/shwpebc/ksgxuvc/povrusy/phpaccess.html?eta%5C=ravik@8051e9cdaa76203a8c222e3257119824db9f.net Line 151 · Column 11
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot