urlquery.net

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

3

urlquery Suspicious - Suspicious Javascript code

VerdictSuspicious
Severitymedium
Triggered on HTTP #1

Threat Detection Systems

11

YARAhub by abuse.ch Detects file containing Telegram Bot API

Verdictmalware
Severitymedium
Matched indicatorzimbrawebmailclientsignin.netlify.app/

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium
Matched indicatorzimbrawebmailclientsignin.netlify.app

DNS4EU Sinkholed

VerdictMalicious
Severitymedium
Matched indicatorzimbrawebmailclientsignin.netlify.app

OpenDNS Phishing Block

VerdictPhishing
Severitymedium
Matched indicatorzimbrawebmailclientsignin.netlify.app

OpenDNS Phishing Block

VerdictPhishing
Severitymedium
Triggered on HTTP #3
Matched indicatorto.lk

DNS4EU Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #3
Matched indicatorto.lk

Quad9 DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #3
Matched indicatorto.lk

DNS4EU Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #4
Matched indicatorurlz.li

Quad9 DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #5
Matched indicatorsnifferip.com

OpenDNS Phishing Block

VerdictPhishing
Severitymedium
Triggered on HTTP #5
Matched indicatorsnifferip.com

DNS4EU Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #5
Matched indicatorsnifferip.com
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot