urlquery.net

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
https://1yz.com/secure/Adobe_Installer.html
Submitted IP / ASN
United States 51.81.213.116 AS16276 · OVH SAS
Final URL
https://1yz.com/secure/Adobe_Installer.html
Final IP / ASN
United States 51.81.213.116 AS16276 · OVH SAS

Final page

Page title
PDF Viewer
Final DOM MIME
text/html; charset=utf-8
Final DOM size
2.01 MB (2106809 bytes)

Detections

URLQuery
4
IDS
0
TDS
1

Activity

HTTP requests
9
Observed hosts
5
Script records
5

Estimated HTTP data

Sent
~4.7 KB
Received
~1.17 MB

Page capture

Final browser state

Recorded title

PDF Viewer

2.01 MB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

2

urlquery Phishing - Adobe

VerdictPhishing
Severitymedium
VerdictPhishing
Severityhigh

urlquery Suspicious - Suspicious Javascript code

VerdictSuspicious
Severitymedium

Threat Detection Systems

1

YARAhub by abuse.ch Detects file containing Telegram Bot API

Verdictmalware
Severitymedium

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
t1.gstatic.com 1 alertsN/A2008-02-112013-05-062026-10-09583 B2.9 KBUnited States 172.217.20.164
1yz.com 6 alertsN/A2000-04-032026-10-102026-10-101.9 KB1.15 MBUnited States 51.81.213.116
www.softwareworld.co 1 alerts18643742017-11-212019-02-132026-10-07571 B15.8 KBCountry unknown 104.26.14.77
t0.gstatic.com 2 alertsN/A2008-02-112013-05-062026-10-051.1 KB3.0 KBUnited States 142.250.178.36
t3.gstatic.com 1 alertsN/A2008-02-112013-05-062026-10-06585 B1014 BUnited States 142.250.178.100
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot