urlquery.net
Investigate/Report/2013a471-1bd1-4a44-9a31-fe240ac73c96
WEBSITE ANALYSIS REPORT

http://intelligenceadx.com/?fu=hl9IX3kELU2faorrbIIW15mwAUgdQqatE9vhBdtsmVeCTNLv4utffz_CAC_FwQG-DkdvwLdsq4svxQJOuDBm_mXu8bcukafDL-bhH5te24FSz-8h6TKiQJ_fEA0nKrTrO0ztzPW_0Yf6egZHVYobAO6szQSwsXk3ZGFKNVkmwFt5aRELYEUfvvZC1uZh8PDEL2hr84cSRjK36e4aWrCsP39tUgyrh4uOYo1LeET6_6dDAzaIYOp6qgomVVYraUucbEezRuijLcHellHCX1hLgv-g5z-2M7IaoT2ARxkpFHni8qCAB4WXFlDmFrVXTa46rF99Wrfbqt9EhLpVTiZG9wkXOQn3624Wc4NLOYtaRRHZjsCMnbGQTKO1JUAcbqKSZ9PZ46DWZ0MXN3cshvBOr2vxJMJpz56uNVPgzCDdRtXf8g7gPn8B3CI_U7BjFFg0IT-ILflrxEImiXtHKNnxH0TeWkUSW1Sq05l572L4QOlt7Fz0HMH_kgEbkx8T9EamGcKaEzhANX8gKRSgRXLbYOkbfWtkIQW_EIvqsObALrFU5zy6J3eBEPhscyhoxWy1Tmzz603zKy2xe5w3X6TGhPMMgH6AhuYjJ-7YrTxvCJmxZkXRROE1-4ZYTuIA7JZ4k3nl04Qi5vRuJ5B_rjD9wYndeFF4y6k7zznwpm92mXR7A_1lI-5ebZ84RPOWnFYaenGk_YQhV1pVwQM-ZK13egbtcH4R5B4ADGFhgUTHXg__NAjxDT-q1fw4XgariFepJGKc4mm5fCz9MGj3rcLkS9rGGFztTia5A593Jdunv8x8cgTGXi3egJh_vw6Dp-DQ&s=1707,1067,1.03,1758.21,1099.01,0

public
Report tags
Submit tags
Request review

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
http://intelligenceadx.com/?fu=hl9IX3kELU2faorrbIIW15mwAUgdQqatE9vhBdtsmVeCTNLv4utffz_CAC_FwQG-DkdvwLdsq4svxQJOuDBm_mXu8bcukafDL-bhH5te24FSz-8h6TKiQJ_fEA0nKrTrO0ztzPW_0Yf6egZHVYobAO6szQSwsXk3ZGFKNVkmwFt5aRELYEUfvvZC1uZh8PDEL2hr84cSRjK36e4aWrCsP39tUgyrh4uOYo1LeET6_6dDAzaIYOp6qgomVVYraUucbEezRuijLcHellHCX1hLgv-g5z-2M7IaoT2ARxkpFHni8qCAB4WXFlDmFrVXTa46rF99Wrfbqt9EhLpVTiZG9wkXOQn3624Wc4NLOYtaRRHZjsCMnbGQTKO1JUAcbqKSZ9PZ46DWZ0MXN3cshvBOr2vxJMJpz56uNVPgzCDdRtXf8g7gPn8B3CI_U7BjFFg0IT-ILflrxEImiXtHKNnxH0TeWkUSW1Sq05l572L4QOlt7Fz0HMH_kgEbkx8T9EamGcKaEzhANX8gKRSgRXLbYOkbfWtkIQW_EIvqsObALrFU5zy6J3eBEPhscyhoxWy1Tmzz603zKy2xe5w3X6TGhPMMgH6AhuYjJ-7YrTxvCJmxZkXRROE1-4ZYTuIA7JZ4k3nl04Qi5vRuJ5B_rjD9wYndeFF4y6k7zznwpm92mXR7A_1lI-5ebZ84RPOWnFYaenGk_YQhV1pVwQM-ZK13egbtcH4R5B4ADGFhgUTHXg__NAjxDT-q1fw4XgariFepJGKc4mm5fCz9MGj3rcLkS9rGGFztTia5A593Jdunv8x8cgTGXi3egJh_vw6Dp-DQ&s=1707,1067,1.03,1758.21,1099.01,0
Submitted IP / ASN
United States 208.95.114.100 AS53334 · TUT-AS
Final URL
https://intelligenceadx.com/?fu=hl9IX3kELU2faorrbIIW15mwAUgdQqatE9vhBdtsmVeCTNLv4utffz_CAC_FwQG-DkdvwLdsq4svxQJOuDBm_mXu8bcukafDL-bhH5te24FSz-8h6TKiQJ_fEA0nKrTrO0ztzPW_0Yf6egZHVYobAO6szQSwsXk3ZGFKNVkmwFt5aRELYEUfvvZC1uZh8PDEL2hr84cSRjK36e4aWrCsP39tUgyrh4uOYo1LeET6_6dDAzaIYOp6qgomVVYraUucbEezRuijLcHellHCX1hLgv-g5z-2M7IaoT2ARxkpFHni8qCAB4WXFlDmFrVXTa46rF99Wrfbqt9EhLpVTiZG9wkXOQn3624Wc4NLOYtaRRHZjsCMnbGQTKO1JUAcbqKSZ9PZ46DWZ0MXN3cshvBOr2vxJMJpz56uNVPgzCDdRtXf8g7gPn8B3CI_U7BjFFg0IT-ILflrxEImiXtHKNnxH0TeWkUSW1Sq05l572L4QOlt7Fz0HMH_kgEbkx8T9EamGcKaEzhANX8gKRSgRXLbYOkbfWtkIQW_EIvqsObALrFU5zy6J3eBEPhscyhoxWy1Tmzz603zKy2xe5w3X6TGhPMMgH6AhuYjJ-7YrTxvCJmxZkXRROE1-4ZYTuIA7JZ4k3nl04Qi5vRuJ5B_rjD9wYndeFF4y6k7zznwpm92mXR7A_1lI-5ebZ84RPOWnFYaenGk_YQhV1pVwQM-ZK13egbtcH4R5B4ADGFhgUTHXg__NAjxDT-q1fw4XgariFepJGKc4mm5fCz9MGj3rcLkS9rGGFztTia5A593Jdunv8x8cgTGXi3egJh_vw6Dp-DQ&s=1707,1067,1.03,1758.21,1099.01,0
Final IP / ASN
United States 208.95.114.100 AS53334 · TUT-AS

Final page

Page title
intelligenceadx.com/?fu=hl9IX3kELU2faorrbIIW15mwAUgdQqatE9vhBdtsmVeCTNLv4utffz_CAC_FwQG-DkdvwLdsq4svxQJOuDBm_mXu8bcukafDL-bhH5te24FSz-8h6TKiQJ_fEA0nKrTrO0ztzPW_0Yf6egZHVYobAO6szQSwsXk3ZGFKNVkmwFt5aRELYEUfvvZC1uZh8PDEL2hr84cSRjK36e4aWrCsP39tUgyrh4uOYo1LeET6
Final DOM MIME
text/html; charset=utf-8
Final DOM size
39 B (39 bytes)

Detections

URLQuery
0
IDS
0
TDS
2

Activity

HTTP requests
2
Observed hosts
1
Script records
0

Estimated HTTP data

Sent
~2.7 KB
Received
~272 B

Page capture

Final browser state

intelligenceadx.com
Final browser screenshot
Recorded title

intelligenceadx.com/?fu=hl9IX3kELU2faorrbIIW15mwAUgdQqatE9vhBdtsmVeCTNLv4utffz_CAC_FwQG-DkdvwLdsq4svxQJOuDBm_mXu8bcukafDL-bhH5te24FSz-8h6TKiQJ_fEA0nKrTrO0ztzPW_0Yf6egZHVYobAO6szQSwsXk3ZGFKNVkmwFt5aRELYEUfvvZC1uZh8PDEL2hr84cSRjK36e4aWrCsP39tUgyrh4uOYo1LeET6

39 B final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

Threat Detection Systems

2

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium

DNS4EU Sinkholed

VerdictMalicious
Severitymedium

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
intelligenceadx.com 4 alerts616542020-04-182020-04-192026-06-232.7 KB272 BUnited States 208.95.114.100
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot