WEBSITE ANALYSIS REPORT

http://ashland-energy.com/aa

17 Oct 2026 · 07:09:03.000 UTCpublic

Report tags: adobe phishing suspicious telegram_bot
Submit tags: openphish

Request review

Phishing detected

7 detections · review the detection signals

Review evidence →

JavaScript

Recorded scripts and browser console observations

URL / source

Introduced by

Size

First seen

scriptElement

734 B

07 Jun 202614:45 UTC

scriptElement

304 B

07 Jun 202614:45 UTC

scriptElement

22.1 KB

17 Oct 202600:13 UTC

Script #03

Recorded metadata

URL

Inline https

https://ashland-energy.com/aa/

IP / ASN

172.93.106.214

AS23470 · RELIABLESITE

Resource information

Introduced by: scriptElement
Inline: true
First seen (UTC): 17 Oct 2026 · 00:13:09.111 UTC
Last seen (UTC): 17 Oct 2026 · 07:09:13.482 UTC
Times seen: 3

Size: 22.1 KB (22656 bytes)
MD5: d2ac9d7992c4b66d4354c9eae909aa64
SHA1: 3f33a4e8f91f32c80ac92c787c4b665d1be8b1aa
SHA256: 7d37410cddde6422dfe224c2b8227c4f830c192c7a2394d690ac0e4b1483f7d5

Detections

Detections attached to this script.
Detection	Severity	Verdict
YARAhub by abuse.ch Detects file containing Telegram Bot API	medium	malware

Source

Loading captured source…

scriptElement

731.7 KB

07 Jun 202614:45 UTC

Console observations

Browser messages in recorded order

22 messages


DOM Content Loaded - Initializing button handlers
Found buttons:1
🚀 Initializing application...
Raw User Agent:mozilla/5.0 (windows nt 10.0; win64; x64; rv:134.0) gecko/20100101 firefox/134.0
✅ Detected Browser: Mozilla Firefox (Class: browser-firefox)
🌐 Applied browser class:browser-firefox
🎨 Detected Color Scheme: Light Mode (Class: light-theme)
🎨 Applied theme class:light-theme
📋 Browser window classes:modal-content browser-firefox light-theme
✅ Theme change listeners activated
✅ Application initialized successfully
✅ PDF viewer elements found, initializing...
📄 Initializing PDF viewer with3base64 images...
📋 Creating3thumbnails...
📑 Sidebar populated
⏳ Preloading images...
✅ PDF viewer initialized with3images
🔄 Started automatic slideshow (4s interval)
✅ Thumbnail1loaded successfully
✅ Thumbnail2loaded successfully
✅ Thumbnail3loaded successfully
✅ Loading screen hidden

Browser console observations in recorded order.
#	Level	Message	Recorded source
1	LOG	`DOM Content Loaded - Initializing button handlers`	https://ashland-energy.com/aa/ Line 3817 · Column 17
2	LOG	`Found buttons:1`	https://ashland-energy.com/aa/ Line 3821 · Column 17
3	LOG	`🚀 Initializing application...`	https://ashland-energy.com/aa/ Line 3742 · Column 15
4	LOG	`Raw User Agent:mozilla/5.0 (windows nt 10.0; win64; x64; rv:134.0) gecko/20100101 firefox/134.0`	https://ashland-energy.com/aa/ Line 3305 · Column 15
5	LOG	`✅ Detected Browser: Mozilla Firefox (Class: browser-firefox)`	https://ashland-energy.com/aa/ Line 3441 · Column 15
6	LOG	`🌐 Applied browser class:browser-firefox`	https://ashland-energy.com/aa/ Line 3795 · Column 17
7	LOG	`🎨 Detected Color Scheme: Light Mode (Class: light-theme)`	https://ashland-energy.com/aa/ Line 3487 · Column 15
8	LOG	`🎨 Applied theme class:light-theme`	https://ashland-energy.com/aa/ Line 3800 · Column 17
9	LOG	`📋 Browser window classes:modal-content browser-firefox light-theme`	https://ashland-energy.com/aa/ Line 3803 · Column 17
10	LOG	`✅ Theme change listeners activated`	https://ashland-energy.com/aa/ Line 3519 · Column 19
11	LOG	`✅ Application initialized successfully`	https://ashland-energy.com/aa/ Line 3808 · Column 17
12	LOG	`✅ PDF viewer elements found, initializing...`	https://ashland-energy.com/aa/ Line 4225 · Column 17
13	LOG	`📄 Initializing PDF viewer with3base64 images...`	https://ashland-energy.com/aa/ Line 4243 · Column 19
14	LOG	`📋 Creating3thumbnails...`	https://ashland-energy.com/aa/ Line 4274 · Column 19
15	LOG	`📑 Sidebar populated`	https://ashland-energy.com/aa/ Line 4252 · Column 19
16	LOG	`⏳ Preloading images...`	https://ashland-energy.com/aa/ Line 4256 · Column 19
17	LOG	`✅ PDF viewer initialized with3images`	https://ashland-energy.com/aa/ Line 4261 · Column 21
18	LOG	`🔄 Started automatic slideshow (4s interval)`	https://ashland-energy.com/aa/ Line 4264 · Column 23
19	LOG	`✅ Thumbnail1loaded successfully`	https://ashland-energy.com/aa/ Line 4299 · Column 23
20	LOG	`✅ Thumbnail2loaded successfully`	https://ashland-energy.com/aa/ Line 4299 · Column 23
21	LOG	`✅ Thumbnail3loaded successfully`	https://ashland-energy.com/aa/ Line 4299 · Column 23
22	LOG	`✅ Loading screen hidden`	https://ashland-energy.com/aa/ Line 3751 · Column 19

http://ashland-energy.com/aa

JavaScript

Script #03

URL

IP / ASN

Resource information

Detections

Source

Console observations

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://ashland-energy.com/aa

[JavaScript]

Script #03

URL

IP / ASN

Resource information

Detections

Source

Console observations

http://ashland-energy.com/aa

JavaScript