urlquery.net
Investigate/Report/5be25474-e4e2-487e-a608-c0983dcf2b59
WEBSITE ANALYSIS REPORT

http://xprime.su/watch/283389

public
Report tags
Submit tags
Request review

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

Threat Detection Systems

10

Private YARA rules Hunting_JS_WebAssembly

Verdictaudit
Severityaudit
Triggered on HTTP #11 JavaScript #17
Matched indicatorxprime.su/_app/immutable/chunks/CZ6AO76J.js

DigiCert UltraDNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #2 HTTP #5 HTTP #7 HTTP #10 HTTP #11 HTTP #15 HTTP #17 HTTP #20 HTTP #23 HTTP #24 HTTP #25 HTTP #26 HTTP #28 HTTP #29 HTTP #30 HTTP #32 HTTP #35 HTTP #42 HTTP #43 HTTP #44 HTTP #47 HTTP #50 HTTP #51 HTTP #55 HTTP #57 HTTP #59 HTTP #60 HTTP #65 HTTP #67 HTTP #69 HTTP #70 HTTP #71 HTTP #73 HTTP #74 HTTP #78 HTTP #80 HTTP #81 HTTP #82 HTTP #83 HTTP #84 HTTP #88 HTTP #89 HTTP #90 HTTP #93 HTTP #94 HTTP #95 HTTP #96 HTTP #101 HTTP #102 HTTP #103 HTTP #104
Matched indicatorxprime.su

Quad9 DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #2 HTTP #5 HTTP #7 HTTP #10 HTTP #11 HTTP #15 HTTP #17 HTTP #20 HTTP #23 HTTP #24 HTTP #25 HTTP #26 HTTP #28 HTTP #29 HTTP #30 HTTP #32 HTTP #35 HTTP #42 HTTP #43 HTTP #44 HTTP #47 HTTP #50 HTTP #51 HTTP #55 HTTP #57 HTTP #59 HTTP #60 HTTP #65 HTTP #67 HTTP #69 HTTP #70 HTTP #71 HTTP #73 HTTP #74 HTTP #78 HTTP #80 HTTP #81 HTTP #82 HTTP #83 HTTP #84 HTTP #88 HTTP #89 HTTP #90 HTTP #93 HTTP #94 HTTP #95 HTTP #96 HTTP #101 HTTP #102 HTTP #103 HTTP #104
Matched indicatorxprime.su

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #16
Matched indicatorusrpubtrk.com

DigiCert UltraDNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #16
Matched indicatorusrpubtrk.com

DNS4EU Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #16
Matched indicatorusrpubtrk.com

IDS

1

Suricata IDS ET INFO Observed Cloudflare workers.dev Domain in TLS SNI

VerdictVerdict not recorded
Severitylow

Suricata /w Emerging Threats Pro

Triggered on Report-level
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot