urlquery.net
Investigate/Report/513c3a34-ff67-464d-987b-e6f8fbbca1e5
WEBSITE ANALYSIS REPORT

http://mixdrop.vip/emb/pj9eep7whgg63po

public
Report tags
Submit tags
Request review

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

Threat Detection Systems

32

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #7 HTTP #14
Matched indicatoradexchangeclear.com

DNS4EU Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #10 HTTP #92
Matched indicatorusrpubtrk.com

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #10 HTTP #92
Matched indicatorusrpubtrk.com

DigiCert UltraDNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #10 HTTP #92
Matched indicatorusrpubtrk.com

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #20 HTTP #47
Matched indicatorflushpersist.com

Quad9 DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #20 HTTP #47
Matched indicatorflushpersist.com

Hagezi Threat Feed Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #20 HTTP #47
Matched indicatorflushpersist.com

DigiCert UltraDNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #23
Matched indicatorft.lastingillipe.com

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #27
Matched indicatorwww.displayvertising.com

DigiCert UltraDNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #33 HTTP #86
Matched indicatoracscdn.com

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #33 HTTP #86
Matched indicatoracscdn.com

DNS4EU Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #48
Matched indicatorweirdopt.com

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #48
Matched indicatorweirdopt.com

Quad9 DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #48
Matched indicatorweirdopt.com

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #56 HTTP #79
Matched indicatorpreferencenail.com

Hagezi Threat Feed Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #56 HTTP #79
Matched indicatorpreferencenail.com

Quad9 DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #56 HTTP #79
Matched indicatorpreferencenail.com

Hagezi Threat Feed Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #64
Matched indicatorinklinkor.com

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #78
Matched indicatordisplayvertising.com

Quad9 DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #103
Matched indicatorcdn.show-sb.com

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #103
Matched indicatorcdn.show-sb.com

IDS

5

Suricata IDS ET INFO Session Traversal Utilities for NAT (STUN Binding Request)

VerdictVerdict not recorded
Severitylow

Suricata /w Emerging Threats Pro

Triggered on Report-level

Suricata IDS ET INFO Session Traversal Utilities for NAT (STUN Binding Response)

VerdictVerdict not recorded
Severitylow

Suricata /w Emerging Threats Pro

Triggered on Report-level

Suricata IDS ET DROP Spamhaus DROP Listed Traffic Inbound group 31

VerdictVerdict not recorded
Severitymedium

Suricata /w Emerging Threats Pro

Triggered on Report-level

Suricata IDS ET INFO Session Traversal Utilities for NAT (STUN Binding Request)

VerdictVerdict not recorded
Severitylow

Suricata /w Emerging Threats Pro

Triggered on Report-level

Suricata IDS ET INFO Session Traversal Utilities for NAT (STUN Binding Response)

VerdictVerdict not recorded
Severitylow

Suricata /w Emerging Threats Pro

Triggered on Report-level
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot