urlquery.net

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
https://www.nagadiya-auditors.com/ee/
Submitted IP / ASN
United States 199.79.63.117 AS46606 · Unified Layer
Final URL
https://www.nagadiya-auditors.com/ee/
Final IP / ASN
United States 199.79.63.117 AS46606 · UNIFIEDLAYER-AS-1

Final page

Page title
PDF Viewer
Final DOM MIME
text/html; charset=utf-8
Final DOM size
2.24 MB (2351710 bytes)

Detections

URLQuery
4
IDS
0
TDS
2

Activity

HTTP requests
12
Observed hosts
7
Script records
6

Estimated HTTP data

Sent
~8.0 KB
Received
~21.01 MB

Page capture

Final browser state

Recorded title

PDF Viewer

2.24 MB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

2

urlquery Phishing - Adobe

VerdictPhishing
Severitymedium
VerdictPhishing
Severityhigh

urlquery Suspicious - Suspicious Javascript code

VerdictSuspicious
Severitymedium

Threat Detection Systems

1

YARAhub by abuse.ch Detects file containing Telegram Bot API

Verdictmalware
Severitymedium

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
api.telegram.org 2067242003-12-152015-06-252026-09-17627 B334 BUnited Kingdom 149.154.166.110
www.softwareworld.co 1 alerts18643742017-11-212019-02-132026-09-19589 B15.8 KBCountry unknown 104.26.15.77
t3.gstatic.com 2 alertsN/A2008-02-112013-05-062026-09-201.2 KB2.5 KBUnited States 142.250.178.100
t2.gstatic.com 1 alertsN/A2008-02-112013-05-072026-09-19599 B1.6 KBUnited States 142.250.178.100
www.nagadiya-auditors.com 7 alertsN/AN/AN/AN/A3.8 KB1.17 MBUnited States 199.79.63.117
t0.gstatic.com 1 alertsN/A2008-02-112013-05-062026-09-21601 B2.9 KBUnited States 142.250.178.36
cleaningbyme.screenconnect.com N/A2004-10-272026-09-232026-09-23654 B19.82 MBUnited States 15.204.109.3
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot