WEBSITE ANALYSIS REPORT

http://plaxorvi-tok193847526.vercel.app/

20 Oct 2026 · 20:31:07.000 UTCpublic

Report tags: suspicious telegram_bot
Submit tags: openphish

Suspicious activity

7 detections · review the detection signals

Review evidence →

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

1

urlquery Suspicious - Suspicious Javascript code

VerdictSuspicious

Severitymedium

Triggered on HTTP #13

Threat Detection Systems

6

YARAhub by abuse.ch Detects file containing Telegram Bot API

Verdictmalware

Severitymedium

Triggered on HTTP #13 JavaScript #5

Matched indicatorplaxorvi-tok193847526.vercel.app/action.js

OpenDNS Phishing Block

VerdictPhishing

Severitymedium

Triggered on HTTP #1 HTTP #2 HTTP #3 HTTP #5 HTTP #6 HTTP #8 HTTP #12 HTTP #13 HTTP #18 HTTP #19 HTTP #25 HTTP #26 HTTP #33

Matched indicatorplaxorvi-tok193847526.vercel.app

Cloudflare DNS Sinkholed

VerdictMalicious

Severitymedium

Triggered on HTTP #1 HTTP #2 HTTP #3 HTTP #5 HTTP #6 HTTP #8 HTTP #12 HTTP #13 HTTP #18 HTTP #19 HTTP #25 HTTP #26 HTTP #33

Matched indicatorplaxorvi-tok193847526.vercel.app

Quad9 DNS Sinkholed

VerdictMalicious

Severitymedium

Triggered on HTTP #1 HTTP #2 HTTP #3 HTTP #5 HTTP #6 HTTP #8 HTTP #12 HTTP #13 HTTP #18 HTTP #19 HTTP #25 HTTP #26 HTTP #33

Matched indicatorplaxorvi-tok193847526.vercel.app

DNS4EU Sinkholed

VerdictMalicious

Severitymedium

Triggered on HTTP #1 HTTP #2 HTTP #3 HTTP #5 HTTP #6 HTTP #8 HTTP #12 HTTP #13 HTTP #18 HTTP #19 HTTP #25 HTTP #26 HTTP #33

Matched indicatorplaxorvi-tok193847526.vercel.app

CIRA Canadian Shield DNS Sinkholed

VerdictMalicious

Severitymedium

Triggered on HTTP #1 HTTP #2 HTTP #3 HTTP #5 HTTP #6 HTTP #8 HTTP #12 HTTP #13 HTTP #18 HTTP #19 HTTP #25 HTTP #26 HTTP #33

Matched indicatorplaxorvi-tok193847526.vercel.app

Loading evidence…