urlquery Phishing - voidProxy MitM Proxy
VerdictPhishing
Severityhigh
WEBSITE ANALYSIS REPORT
https://c.gle/%41%41%75%44%57%76%6E%6F%67%63%54%57%35%57%50%42%4E%44%39%47%4E%6E%39%73%59%6D%55%74%61%46%78%39%73%74%74%70%71%50%59%32%7A%38%41%44%79%56%54%38%6D%41%50%62%4E%56%32%66%78%7A%6B%6A%4F%46%56%71%4F%6C%58%75%57%70%31%58%35%48%4D%73%76%4F%36%6C%59%4B%62%2D%44%48%4C%7A%31%57%74%56%58%6C%49%64%55%78%63%6B%41%56%61%63%62%49%66%71%62%64%31%66%4E%77%31%4A%6F%30%34%66%35%35%35%77%5A%6D%53%39%79%35%53%56%71%4C%36%4E%79%68%53%65%48%4B%48%55%6B%6B%63%58#%6D%75%6E%65%61%6B%69%2E%69%77%61%6F%40%62%6E%79%6D%65%6C%6C%6F%6E%2E%63%6F%6D
public
Phishing detected
Review evidence →5 detections · review the detection signals
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
2urlquery Suspicious - Suspicious Javascript code
VerdictSuspicious
Severitymedium
Triggered on HTTP #3
Threat Detection Systems
3YARAhub by abuse.ch Detects file containing Telegram Bot API
Verdictmalware
Severitymedium
Matched indicator6acef8ee7aa1c0e285328ff8.su2.highspot-page.com/1-1/WyI2YWNlZjhlZTdhYTFjMGUyODUzMjhmZjgiLCJmYi5jb20vNGQ0Y2E1ZWJjN2Q0NWYxYjYxYzA5ZTRlYzliZjU3NmYwYWJlYjZjZi9zaXRlIiwiZmIuY29tIixudWxsLCIyMDI2LTEwLTE0VDAzOjM4OjQzLjUyNTA0MVoiXQ==--1c5a8ada21f0bf97ccd8ab08740835487c9f7f12/redirect.html#%6D%75%6E%65%61%6B%69%2E%69%77%61%6F%40%62%6E%79%6D%65%6C%6C%6F%6E%2E%63%6F%6D
DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
DNS4EU Sinkholed
VerdictMalicious
Severitymedium
Triggered on HTTP #9
Matched indicatorzpr.io