Report Overview
Visitedpublic
2026-06-28 16:48:41
Submit Tags
URL
qnasndnasn.vercel.app/login.html
Finishing URL
qnasndnasn.vercel.app/login.html
IP / ASN
64.29.17.3
Title
QNB Finansbank İnternet Şubesi
Suspicious - Suspicious Javascript code
Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
5
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
fonts.gstatic.com | unknown | 2008-02-11 | 2014-04-02 | 2026-06-21 | 1.7 kB | 184 kB | 142.250.178.99 | |
cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-06-21 | 3.6 kB | 236 kB |  104.17.25.14 |  |
cdn.jsdelivr.net | 1678 | 2012-05-16 | 2012-09-30 | 2026-06-21 | 1.7 kB | 388 kB | 104.17.208.5 | |
stackpath.bootstrapcdn.com | 21970 | 2012-05-25 | 2018-04-05 | 2026-06-22 | 520 B | 72 kB | 104.18.11.207 | |
maxcdn.bootstrapcdn.com | 6807 | 2012-05-25 | 2014-06-18 | 2026-06-22 | 532 B | 30 kB | 104.18.10.207 | |
ajax.googleapis.com | 3691 | 2005-01-25 | 2012-05-22 | 2026-06-22 | 507 B | 88 kB | 142.250.178.74 | |
qnasndnasn.vercel.app 21 alert(s) on this Host | unknown | unknown | 2026-05-08 | 2026-06-28 | 3.1 kB | 2.6 MB | 216.198.79.3 |      |
code.jquery.com | 4915 | 2005-12-10 | 2012-05-21 | 2026-06-21 | 957 B | 180 kB | 151.101.129.155 |   |
fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-06-21 | 541 B | 13 kB | 142.250.178.106 |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Vercel (PaaS)
Vercel is a cloud platform for static frontends and serverless functions.cdnjs (CDN)
cdnjs is a free distributed JS library delivery service.Bootstrap:5.0.2 (UI frameworks)
Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.jQuery CDN (CDN)
jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.Google Hosted Libraries (CDN)
Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.jQuery:3.3.1 (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.Varnish (Caching)
Varnish is a reverse caching proxy.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | qnasndnasn.vercel.app/login.html | malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | qnasndnasn.vercel.app/assets/js/main.js | malware | Detects file containing Telegram Bot API |
| Cloudflare DNS | qnasndnasn.vercel.app | malicious | Sinkholed |
| OpenDNS | qnasndnasn.vercel.app | phishing | Phishing Block |
| DNS4EU | qnasndnasn.vercel.app | malicious | Sinkholed |
Telegram Bot detected (1)
URL
qnasndnasn.vercel.app/login.html
IP / ASN
216.198.79.3
Token
8308477170:AAFpAGX8i3RSqr1B2aADP0SBmcH8LXGmgBA
Bot Overview
User ID8308477170
Usernameqnba_bot
First NameQNBOT
Last NameN/A
Chat Info
Chat ID-1003874564893
Chat Typesupergroup
Titlelegals
User Count21
Admins1
Pending Msgs1
JavaScript (8)
No JavaScripts
HTTP Transactions (25)
| URL | IP | Response | Size |
|---|