urlquery.net

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
http://xq.biogasos.org/project
Submitted IP / ASN
United Kingdom 77.68.5.178 AS8560 · IONOS SE
Final URL
https://delavar.org/admin/update/
Final IP / ASN
United States 136.0.111.42 AS40676 · AS40676

Final page

Page title
PDF Viewer
Final DOM MIME
text/html; charset=utf-8
Final DOM size
1.94 MB (2038462 bytes)

Detections

URLQuery
3
IDS
0
TDS
1

Activity

HTTP requests
16
Observed hosts
7
Script records
5

Estimated HTTP data

Sent
~8.5 KB
Received
~4.30 MB

Page capture

Final browser state

Recorded title

PDF Viewer

1.94 MB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

2

urlquery Phishing - Adobe

VerdictPhishing
Severitymedium

urlquery Suspicious - Suspicious Javascript code

VerdictSuspicious
Severitymedium

Threat Detection Systems

1

YARAhub by abuse.ch Detects file containing Telegram Bot API

Verdictmalware
Severitymedium

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
t0.gstatic.com N/A2008-02-112013-05-062026-07-18587 B2.9 KBUnited States 142.251.9.104
www.google.com 221997-09-152015-05-102026-07-192.2 KB1.8 KBUnited States 142.251.150.119
delavar.org 6 alertsN/A2024-10-292026-07-232026-07-232.0 KB4.28 MBUnited States 136.0.111.42
www.softwareworld.co 18643742017-11-212019-02-132026-07-16575 B15.8 KBCountry unknown 172.67.68.67
xq.biogasos.org N/AN/AN/AN/A1.5 KB1.5 KBUnited Kingdom 77.68.5.178
t3.gstatic.com N/A2008-02-112013-05-062026-07-181.1 KB3.0 KBUnited States 142.251.9.106
t1.gstatic.com N/A2008-02-112013-05-062026-07-16589 B1014 BUnited States 142.251.9.99
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot