urlquery.net

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
https://sirimaneproperties.com/open/Files.html
Submitted IP / ASN
United States 192.185.139.51 AS31898 · Oracle Corporation
Final URL
https://sirimaneproperties.com/open/Files.html
Final IP / ASN
United States 192.185.139.51 AS19871 · NETWORK-SOLUTIONS-HOSTING

Final page

Page title
DocuSign - Download to View Document
Final DOM MIME
text/html; charset=utf-8
Final DOM size
15.6 KB (15926 bytes)

Detections

URLQuery
1
IDS
0
TDS
2

Activity

HTTP requests
6
Observed hosts
4
Script records
1

Estimated HTTP data

Sent
~3.3 KB
Received
~171.9 KB

Page capture

Final browser state

Recorded title

DocuSign - Download to View Document

15.6 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

1

urlquery Suspicious - Suspicious Javascript code

VerdictSuspicious
Severitymedium

Threat Detection Systems

2

YARAhub by abuse.ch Detects file containing Telegram Bot API

Verdictmalware
Severitymedium

DNS4EU Sinkholed

VerdictMalicious
Severitymedium

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
i.ibb.co 216432010-07-202018-11-252026-10-24547 B1.1 KBIsrael 45.43.142.2
fonts.googleapis.com 3132005-01-252012-05-232026-10-18538 B10.5 KBUnited States 142.250.178.42
sirimaneproperties.com 3 alertsN/A2025-06-092026-10-242026-10-24506 B15.6 KBUnited States 192.185.139.51
fonts.gstatic.com N/A2008-02-112014-04-022026-10-181.7 KB144.6 KBUnited States 142.250.178.35
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot