Report Overview
Visitedpublic
2026-04-10 15:03:52
Submit Tags
URL
financeadvice.fit/com?key=ads8fj3k2n9x4p7z1q
Finishing URL
financeadvice.fit/com
IP / ASN
185.236.228.131
Title
Finance Advice
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
1
Threat Detection Systems
1
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
fonts.gstatic.com | unknown | 2008-02-11 | 2014-04-02 | 2026-04-05 | 4.9 kB | 323 kB |  142.250.178.35 | |
ipinfo.io | 1327 | 2013-04-23 | 2013-12-16 | 2026-04-08 | 435 B | 539 B | 34.117.59.81 |   |
financeadvice.fit 2 alert(s) on this Host | unknown | 2026-04-07 | 2026-04-10 | 2026-04-10 | 14 kB | 2.4 MB | 185.236.228.131 |    |
fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-04-05 | 1.4 kB | 14 kB | 142.251.38.106 | |
cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-04-05 | 1.5 kB | 304 kB |  104.17.24.14 | |
Google Cloud CDN (CDN)
Cloud CDN uses Google's global edge network to serve content closer to users.Google Cloud (IaaS)
Google Cloud is a suite of cloud computing services.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.cdnjs (CDN)
cdnjs is a free distributed JS library delivery service.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium | Client IP | 34.117.59.81 | ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | financeadvice.fit/lander/advays/js/app.min.js | malware | Detects file containing Telegram Bot API |
Telegram Bot detected (1)
URL
financeadvice.fit/lander/advays/js/app.min.js
IP / ASN
185.236.228.131
Token
7853882497:AAFjBI02bH6rc4ZW4U7Qvcf9D8fgvehq1g8
Bot Overview
User ID7853882497
Usernamefinanceadvice6_bot
First Nameадвайс Новый
Last NameN/A
Chat Info
Chat ID-1002275133023
Chat Typesupergroup
TitleFin-Advice Ih
User Count5
Admins2
Pending Msgs0
JavaScript (5)
No JavaScripts
HTTP Transactions (42)
| URL | IP | Response | Size |
|---|