WEBSITE ANALYSIS REPORT

https://ds.lafqld.net/encrypted_proposal/Adobe_Installer.html

30 Jul 2026 · 04:01:31.000 UTCpublic

Report tags: adobe phishing suspicious telegram_bot
Submit tags: openphish

Request review

Phishing detected

5 detections · review the detection signals

Review evidence →

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

urlquery Phishing - Adobe

VerdictPhishing

Severitymedium

Triggered on HTTP #1 HTTP #2 HTTP #5 HTTP #8

urlquery Suspicious - Suspicious Javascript code

VerdictSuspicious

Severitymedium

Triggered on HTTP #5

urlquery Suspicious - Suspicious Javascript code

VerdictSuspicious

Severitymedium

Triggered on HTTP #5

Threat Detection Systems

YARAhub by abuse.ch Detects file containing Telegram Bot API

Verdictmalware

Severitymedium

Triggered on HTTP #5 JavaScript #3

Matched indicatords.lafqld.net/encrypted_proposal/Adobe_Installer.html

Quad9 DNS Sinkholed

VerdictMalicious

Severitymedium

Triggered on HTTP #1 HTTP #2 HTTP #5 HTTP #8

Matched indicatords.lafqld.net

https://ds.lafqld.net/encrypted_proposal/Adobe_Installer.html

Detection signals

URLQuery

urlquery Phishing - Adobe

urlquery Suspicious - Suspicious Javascript code

urlquery Suspicious - Suspicious Javascript code

Threat Detection Systems

YARAhub by abuse.ch Detects file containing Telegram Bot API

Quad9 DNS Sinkholed

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://ds.lafqld.net/encrypted_proposal/Adobe_Installer.html

[Detection signals]

URLQuery

urlquery ·Phishing - Adobe

urlquery ·Suspicious - Suspicious Javascript code

urlquery ·Suspicious - Suspicious Javascript code

Threat Detection Systems

YARAhub by abuse.ch ·Detects file containing Telegram Bot API

Quad9 DNS ·Sinkholed

https://ds.lafqld.net/encrypted_proposal/Adobe_Installer.html

Detection signals

urlquery Phishing - Adobe

urlquery Suspicious - Suspicious Javascript code

urlquery Suspicious - Suspicious Javascript code

YARAhub by abuse.ch Detects file containing Telegram Bot API

Quad9 DNS Sinkholed